Lizard Project - vulnerabilities (CVEs)

2 CVEs in 2 products, 0 in the last 30 days, newest from 2018-09-13.

Products

• Lizard - 2 CVEs
• Lz5 - 1 CVEs

Newest CVEs of Lizard Project

• CVE-2018-16985 - CVSS 7.5 (high), 2018-09-13: In Lizard (formerly LZ5) 2.0, use of an invalid memory address was discovered in LZ5_compress_continue in lz5_compress.c, related to LZ5_compress_fastSmall…
• CVE-2018-11498 - CVSS 7.8 (high), 2018-05-26: In Lizard v1.0 and LZ5 v2.0 (the prior release, before the product was renamed), there is an unchecked buffer size during a memcpy in the…