An issue exists in lrzip version 0.641. There is a use-after-free in ucompthread() in stream.c:1538.
long range zip project long range zip 0.641