CVE-2025-62813 | LZ4 up to 1.10.0 lib/lz4frame.c LZ4F_createCDict_advanced null byte or nul character

October 23, 2025 Yanac

A vulnerability described as problematic has been identified in LZ4 up to 1.10.0. This affects the function LZ4F_createCDict_advanced in the library lib/lz4frame.c. The manipulation results in improper neutralization of null byte or nul character.

This vulnerability was named CVE-2025-62813. The attack needs to be approached locally. There is no available exploit.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More