CVE-2014-4607: Oberhumer LIBLZO2

High severity, CVSS 8.8. EPSS: 5.3% chance of exploitation in the next 30 days.

Integer overflow in the LZO algorithm variant in Oberhumer liblzo2 and lzo-2 before 2.07 on 32-bit platforms might allow remote attackers to execute arbitrary code via a crafted Literal Run.

Affected products

• Oberhumer LIBLZO2: before 2.07 (fixed in 2.07)
• Oberhumer LZO2: before 2.07 (fixed in 2.07)

Published 2020-02-12. Last modified 2026-06-17.