Vulnerability · Published Oct 6, 2026 · Assigned by VulnCheck

CVE-2026-105842lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname

Medium 6.4

In plain English

A medium-severity heap buffer overflow in lrzsz from Uwe Ohse. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.4Medium

Exploit odds (30 days)0.2%top 89.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf() in pipe mode or strcpy() to corrupt heap memory and crash lrz.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:12	lrzsz	no fix listed	DEBIAN-CVE-2026-105842
Debian:13	lrzsz	no fix listed	DEBIAN-CVE-2026-105842
Debian:14	lrzsz	0.12.21rc-5	DEBIAN-CVE-2026-105842
Ubuntu:22.04:LTS	lrzsz	no fix listed	UBUNTU-CVE-2026-105842
Ubuntu:24.04:LTS	lrzsz	no fix listed	UBUNTU-CVE-2026-105842
Ubuntu:26.04:LTS	lrzsz	no fix listed	UBUNTU-CVE-2026-105842
Ubuntu:26.10	lrzsz	no fix listed	UBUNTU-CVE-2026-105842

Affected products (as reported)

Vendor	Product	Versions
Uwe Ohse	lrzsz	0 – before 0.13.0

Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H

References

lrzsz 0.13.0 security changes vendor-advisory
https://ohse.de/uwe/software/lrzsz.html product
VulnCheck Advisory: lrzsz before 0.13.0 Heap Buffer Overflow via lrz procheader() Pathname third-party-advisory