Bzip3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:bzip3_project:bzip3:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBzip3 Project (782f192e-68b7-5080-9ff1-5cadd81ccc5d)
ProductBzip3 (ee835be2-7818-5d36-a9a5-0b3a17e82309)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/bzip3 purl2cpe 2026-06-01 10:12:51.142290
pkg:deb/ubuntu/bzip3 purl2cpe 2026-06-01 10:12:51.142292
pkg:github/kspalaiologos/bzip3 purl2cpe 2026-06-01 10:12:51.142294
pkg:rpm/fedora/bzip3 purl2cpe 2026-06-01 10:12:51.142296
pkg:rpm/opensuse/bzip3 purl2cpe 2026-06-01 10:12:51.142298

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-29421 vulnerable 2026-06-08 06:02:40.167414 Details available
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an out-of-bounds write in bz3_decode_block.
Published: 2023-04-06T00:00:00.000Z
Updated: 2025-02-12T16:25:40.386Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29420 vulnerable 2026-06-08 06:02:40.167042 Details available
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a crash caused by an invalid memmove in bz3_decode_block.
Published: 2023-04-06T00:00:00.000Z
Updated: 2025-03-05T19:00:53.819Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29419 vulnerable 2026-06-08 06:02:40.166616 Details available
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is a bz3_decode_block out-of-bounds read.
Published: 2023-04-06T00:00:00.000Z
Updated: 2025-03-05T19:08:28.747Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29418 vulnerable 2026-06-08 06:02:40.165998 Details available
An issue was discovered in libbzip3.a in bzip3 before 1.2.3. There is an xwrite out-of-bounds read.
Published: 2023-04-06T00:00:00.000Z
Updated: 2025-03-05T19:11:01.348Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29416 vulnerable 2026-06-08 06:02:40.163280 Details available
An issue was discovered in libbzip3.a in bzip3 before 1.3.0. A bz3_decode_block out-of-bounds write can occur with a crafted archive because bzip3 does not follow the required procedure for interacting with libsais.
Published: 2023-04-06T00:00:00.000Z
Updated: 2025-02-13T20:58:32.967Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29415 vulnerable 2026-06-08 06:02:40.162644 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.