CVE-2026-105842

Name	CVE-2026-105842
Description	lrzsz before 0.13.0 contains a heap-based buffer overflow vulnerability in procheader() of the lrz receive utility when copying overlong sender-supplied filenames into Pathname. Malicious ZMODEM senders can supply filenames up to 8192 bytes, overflowing the buffer via sprintf() in pipe mode or strcpy() to corrupt heap memory and crash lrz.
Source	CVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	1150240

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
lrzsz (PTS)	bookworm	0.12.21-10	vulnerable
	trixie	0.12.21rc-0.2	vulnerable
	forky, sid	0.13.1-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
lrzsz	source	(unstable)	0.12.21rc-5			1150240

[trixie] - lrzsz <no-dsa> (Minor issue)
https://ohse.de/uwe/software/lrzsz/NEWS-0.13.0.html