Junglewise Threat Intelligence

CVE-2021-29482: GO-2020-0016 - Infinite loop in github.com/ulikunitz/xz

CVE-2021-29482 · Severity: low · CVSS 3.1 · Published 2021-04-14

Technologies: github.com/ulikunitz/xz (Go). Vendors: Go.

Executive brief

Infinite loop in github.com/ulikunitz/xz

Affected products

Go github.com/ulikunitz/xz

Related threats

GO-2025-3922 - Memory leaks when decoding a corrupted multiple LZMA archives in github.com/ulikunitz/xz
Go encoding/binary infinite loop in ReadUvarint and ReadVarint