CVE-2016-3189

MediumCVSS 6.5

Published: 30/06/2016(UTC)Updated: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

15.56%

97th percentile - higher than 97% of all known CVEs

Summary

Use-after-free vulnerability in bzip2recover in bzip2 1.0.6 allows remote attackers to cause a denial of service (crash) via a crafted bzip2 file, related to block ends set to before the start of the block.

Risk Assessment

An attacker can cause a process crash, potentially leading to service unavailability.

Recommendation

Update bzip2 to a patched version or avoid processing untrusted bzip2 files.

Other vulnerabilities in bzip2

CVE-2019-12900Critical
BZ2_decompress in decompress.c in bzip2 through 1.0.6 has an out-of-bounds write when there are many selectors.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS