b
bzip2
Security Risk Profile
22
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 10 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 21, 2016 to present
10
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
5.3
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
22/100
low
Severity Distribution
Critical
2High
0Medium
3Low
2Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Use After Free
2
Most Affected Products
1. Ubuntu Ubuntu16
2. Bzip2 bzip28
3. ubuntu/bzip26
4. ubuntu/libbz2-1.06
5. Microsoft azl3 bzip2 1.0.8-12
Recent Vulnerabilities
See more →CVE-2026-42250
CVSS 4.8medium
Off-by-One Leading to Out-of-Bounds Write in bzip2
May 28, 2026
https://seclists.org/oss-sec/2025/q3/100
unknown
xterm terminal crash due to malicious character sequences in file name
Aug 13, 2025🔧 No Patch
REDHAT-BUG-2332075
CVSS 4.0medium
Dec 12, 2024🔧 No Patch
REDHAT-BUG-1724459
CVSS 1.0low
Jun 27, 2019🔧 No Patch
USN-4038-1
unknown
bzip2 vulnerabilities
Jun 26, 2019
USN-4038-2
unknown
bzip2 vulnerabilities
Jun 26, 2019
PSF-2019-4
CVSS 9.8critical
Jun 19, 2019🔧 No Patch
HSEC-2024-0002
CVSS 9.8critical
Jun 19, 2019🔧 No Patch
PSF-2016-5
CVSS 6.5medium
Jun 30, 2016🔧 No Patch
REDHAT-BUG-1319648
CVSS 1.0low
Mar 21, 2016🔧 No Patch
Monitor bzip2 in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.