CVE-2026-15310
Published: August 25th, 2026
When decompressing crafted zip files using the bzip/LZMA/Zstandard
compressions, Python could use an attacker-controlled size to
pre-allocate memory, possibly resulting in memory exhaustion.
Unknown
CVSS v2:
CVSS v2:
Status
| DocFilters Release | Package | State | Justification | Comment |
|---|---|---|---|---|
| 22.3 | lzma (17.01) | Needs Triage | ||
| 22.2 | lzma (17.01) | Needs Triage | ||
| 22.1 | lzma (17.01) | Needs Triage | ||
| 21.11 | lzma (17.01) | Needs Triage | ||
| 21.8 | lzma (17.01) | Needs Triage | ||
| 21.5.0 | lzma (17.01) | Needs Triage | ||
| 21.2.0 | lzma (17.01) | Needs Triage | ||
| 11.4.19.3667 | lzma (17.01) | Needs Triage | ||
| 11.4.18.3599 | lzma (17.01) | Needs Triage | ||
| 11.4.16.3445 | lzma (17.01) | Needs Triage | ||
| 11.4.15.3368 | lzma (17.01) | Needs Triage | ||
| 11.4.14.3263 | lzma (17.01) | Needs Triage | ||
| 11.4.13.3179 | lzma (17.01) | Needs Triage | ||
| 11.4.12.3054 | lzma (17.01) | Needs Triage | ||
| 11.4.11.3040 | lzma (17.01) | Needs Triage | ||
| 11.4.11.2990 | lzma (17.01) | Needs Triage | ||
| 11.4.10.2934 | lzma (17.01) | Needs Triage | ||
| 11.4.9.2878 | lzma (17.01) | Needs Triage | ||
| 11.4.8.2822 | lzma (17.01) | Needs Triage |