CVE-2023-39741: Long Range Zip Project Long Range Zip

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

lrzip v0.651 was discovered to contain a heap overflow via the libzpaq::PostProcessor::write(int) function at /libzpaq/libzpaq.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.

Affected products

• Long Range Zip Project Long Range Zip: version 0.651 only

Published 2023-08-17. Last modified 2026-06-17.