CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process.

CVSS v3 3.3 LOW

3.3^/10

CVSS v3 : LOW

Vector :

Exploitability : 1.8 / Impact : 1.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://github.com/Genivia/ugrep
https://github.com/Genivia/ugrep/blob/v7.5.0/src/zopen.c#L673
https://github.com/Genivia/ugrep/commit/c12849a11264e2c81c860bf78ee9039772f307a4
https://github.com/Genivia/ugrep/issues/511
https://github.com/Genivia/ugrep/releases/tag/v7.6.0
https://www.vulncheck.com/advisories/ugrep-before-7.6.0-heap-buffer-over-read-via-z-decompression

Configurations

No configuration.

History

19 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) ugrep anterior a la 7.6.0 contiene una vulnerabilidad de lectura excesiva de búfer de pila en el descompresor LZW al procesar archivos de archivo .Z manipulados. Los atacantes pueden proporcionar archivos .Z malformados que provocan que el descompresor lea un byte más allá del búfer de pila asignado, lo que podría provocar la caída del proceso.

Information

Published : 2026-09-05 12:16

Updated : 2026-10-19 22:10

NVD link : CVE-2025-15614

Mitre link : CVE-2025-15614

CVE.ORG link : CVE-2025-15614

JSON object : View

Products Affected

No product.

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2025-15614", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-15614", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-10T14:19:10.467174Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.3, "attackVector": "LOCAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 4.8, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Genivia", "product": "ugrep", "versions": [{"status": "affected", "version": "0", "lessThan": "7.6.0", "versionType": "semver"}], "packageURL": "pkg:github/Genivia/ugrep", "defaultStatus": "unaffected"}]}], "published": "2026-09-05T12:16:45.450", "references": [{"url": "https://github.com/Genivia/ugrep", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Genivia/ugrep/blob/v7.5.0/src/zopen.c#L673", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Genivia/ugrep/commit/c12849a11264e2c81c860bf78ee9039772f307a4", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Genivia/ugrep/issues/511", "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/Genivia/ugrep/releases/tag/v7.6.0", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/ugrep-before-7.6.0-heap-buffer-over-read-via-z-decompression", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process."}, {"lang": "es", "value": "ugrep anterior a la 7.6.0 contiene una vulnerabilidad de lectura excesiva de b\u00fafer de pila en el descompresor LZW al procesar archivos de archivo .Z manipulados. Los atacantes pueden proporcionar archivos .Z malformados que provocan que el descompresor lea un byte m\u00e1s all\u00e1 del b\u00fafer de pila asignado, lo que podr\u00eda provocar la ca\u00edda del proceso."}], "lastModified": "2026-10-19T22:10:00.130", "sourceIdentifier": "disclosure@vulncheck.com"}