CVE-2021-42374

Name of the Vulnerable Software and Affected Versions BusyBox (affected versions not specified)

Description An out-of-bounds heap read in BusyBox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that uses the vulnerable applet. The issue allows a remote attacker to cause an out-of-bounds read error and read the contents of the system memory or perform a denial-of-service attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.