A vulnerability was found in ckolivas lrzip up to 0.651. It has been rated as critical. This impacts the function lzma_decompress_buf of the file stream.c. Performing a manipulation results in use after free.

This vulnerability is known as CVE-2025-15570. Attacking locally is a requirement. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.