CyberRota Analysis
AI-GeneratedThe vulnerability affects the ugrep tool prior to version 7.6.0, specifically in its LZW decompressor when handling crafted .Z archive files. Attackers can exploit this flaw by supplying malformed .Z files, leading to a heap buffer over-read that may crash the application. Users of ugrep, particularly those processing .Z files, should prioritize updating to the latest version to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process.