VULNERABILITY INTELLIGENCE

CVE-2016-1925

CVSS score9.8 CRITICAL

EPSS probability2.99%

CISA KEVNot currently listed

Published2017-01-23

Last modified2026-06-17

Description

Integer underflow in header.c in lha allows remote attackers to have unspecified impact via a large header size value for the (1) level0 or (2) level1 header in a lha archive, which triggers a buffer overflow.