CVE-2021-42374

An out-of-bounds heap read in Busybox’s unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that

Date published : 2021-11-15

Unboxing BusyBox – 14 new vulnerabilities uncovered by Claroty and JFrog