SA-2026-125 - Global buffer over-read in gzip LZH decompression (CVE-2026-41992)
Summary GNU gzip contains a global buffer overflow in its LZH decompression logic, caused by improper reuse of shared global state between different decompression formats within a single execution. ...