description: An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that
problem types: CWE-125
affected:
{
vendor: busybox
product: busybox
versions:
version: unspecified, lessThan: 1.34.0, status: affected, versionType: custom
}