{"kind": "product", "path": "vulns/debian-12/p7zip", "name": "p7zip", "product": "p7zip", "ecosystem": "Debian:12", "items": [{"id": "CVE-2026-104086", "noindex": false, "published": "2026-10-14T14:06:14.543Z", "modified": "2026-10-19T19:06:48.652Z", "cvss": 6.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00188, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-104086", "title": "7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table", "description": "7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s no_ids field is set so that the final metadata block’s expected size is miscomputed and bypasses the size validation check. By listing or extracting the crafted archive, attackers can cause the application to return uninitialized heap memory as the kpidUserId and kpidGroupId properties, exposing potentially sensitive process memory contents to the user.", "references": ["https://sourceforge.net/p/sevenzip/discussion/45797/thread/db6922e1d0/", "https://7-zip.org/", "https://www.vulncheck.com/advisories/7-zip-squashfs-uninitialized-memory-disclosure-via-uid-gid-table"], "fixes": [], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-14266", "noindex": false, "published": "2026-07-29T17:17:13.649Z", "modified": "2026-07-30T03:55:31.679Z", "cvss": 7, "cvss_vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00742, "kev": false, "exploits": ["public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14266", "title": "7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability", "description": "7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the processing of XZ chunked data. Crafted XZ-compressed data can trigger an overflow of a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-30169.", "references": ["https://www.zerodayinitiative.com/advisories/ZDI-26-444/", "http://www.openwall.com/lists/oss-security/2026/07/17/12", "https://nvd.nist.gov/vuln/detail/CVE-2026-14266"], "fixes": ["16.02+really26.02+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-58052", "noindex": false, "published": "2026-06-28T01:32:54.971Z", "modified": "2026-07-14T20:48:24.263Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00171, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-58052", "title": "7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision", "description": "7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named ':Zone.Identifier:$DATA' is not matched and NTFS canonicalizes it to the same stream, overwriting the propagated Internet-zone marker with ZoneId=0. A second STM record named '::$DATA' overwrites the extracted file's default data stream, letting an attacker defeat SmartScreen/MotW warnings and spoof file content.", "references": ["https://github.com/bikini/exploitarium/tree/main/7zip-rar5-motw-chain-poc", "https://github.com/ip7z/7zip", "https://www.vulncheck.com/advisories/7-zip-mark-of-the-web-bypass-via-rar5-alternate-data-stream-name-collision"], "fixes": [], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48112", "noindex": false, "published": "2026-06-05T16:20:19.633Z", "modified": "2026-06-05T19:38:43.293Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00391, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48112", "title": "GHSL-2026-122 7-Zip Ar SYMDEF OOB Read", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue.", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48112"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48111", "noindex": false, "published": "2026-06-05T16:09:31.039Z", "modified": "2026-06-08T17:19:57.025Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "severity": "medium", "epss": 0.00337, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48111", "title": "GHSL-2026-121 7-Zip UEFI DEPEX OOB Read", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parser(CPP/7zip/Archive/UefiHandler.cpp). The function validates an attacker-controlled opcode byte using > instead of >= against the element count of the 10-entry kExpressionCommands static array, allowing an opcode value of 10 to read one pointer slot (8 bytes on x64) past the end of the array in .rodata. The out-of-bounds value is then dereferenced as a const char * and passed through strlen and memcpy into the archive's Characts proper", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48111"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48104", "noindex": false, "published": "2026-06-05T15:56:34.744Z", "modified": "2026-06-05T19:08:26.264Z", "cvss": 4.2, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:L", "severity": "medium", "epss": 0.00246, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48104", "title": "GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by a sparsely populated index array. In the SquashFS handler, _blockToNode is allocated with capacity for every metadata block but populated only when an inode crosses a block boundary, so a crafted image with few inodes spanning many blocks leaves most slots holding raw heap contents (the underlying allocator does not zero-initialize POD storage). When OpenDir looks up an attacker-influenced blockIndex (derived from the RootInode superblock field), it reads two of these uninitialized sl", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48104"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48103", "noindex": false, "published": "2026-06-05T15:48:49.891Z", "modified": "2026-06-08T16:07:27.768Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "severity": "medium", "epss": 0.00337, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48103", "title": "GHSL-2026-119 7-Zip WIM SecurityId OOB read", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging) archive handler's security descriptor lookup. In CHandler::GetSecurity (CPP/7zip/Archive/Wim/WimHandler.cpp), the per-image SecurOffsets table holds numEntries + 1 cumulative offsets, but the check securityId >= SecurOffsets.Size() admits securityId == numEntries, and the function then reads SecurOffsets[securityId + 1], fetching one UInt32 past the end of the heap-allocated CRecordVector (which performs no bounds checking on operator[]). The securityId is attacker-controlled at offset ", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48103"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48102", "noindex": false, "published": "2026-06-05T15:19:04.737Z", "modified": "2026-06-09T14:37:34.033Z", "cvss": 3.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N", "severity": "low", "epss": 0.0027, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48102", "title": "GHSL-2026-118: 7-Zip UDF Field OOB Read", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifier Descriptor parser. In CFileId::Parse (CPP/7zip/Archive/Udf/UdfIn.cpp), after validating size < 38 + idLen + impLen and advancing processed to 38 + impLen + idLen, the alignment-padding loop reads p[processed] while incrementing up to 3 times to reach a 4-byte boundary, and the processed <= size bounds check only runs after the loop. When (38 + impLen + idLen) % 4 != 0 and 38 + impLen + idLen == size, the loop reads 1 to 3 bytes past the end of the exact-size heap", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48102"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48101", "noindex": false, "published": "2026-06-05T15:17:38.676Z", "modified": "2026-06-05T19:38:15.207Z", "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "severity": "medium", "epss": 0.00397, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48101", "title": "GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory disclosure vulnerability in the UEFI capsule (.scap) parser in 7-Zip. The OpenCapsule function allocates a heap buffer of attacker-declared CapsuleImageSize (up to 1 GiB) without zero-initialization, then reads the file contents into it with ReadStream_FALSE whose return value is silently discarded. If the file is truncated, the unread tail of the buffer retains uninitialized heap memory, which is then exposed as extracted file content via GetStream. Version 26.0.1 fixes the issue.", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48101"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48095", "noindex": false, "published": "2026-06-05T13:57:43.772Z", "modified": "2026-06-08T19:10:46.668Z", "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00629, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48095", "title": "GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation", "description": "7-Zip is a file archiver with a high compression ratio. Versions 26.00 and prior contain a heap buffer overflow vulnerability caused by an under-allocation in the NTFS compressed stream buffer (GetCuSize shift UB), potentially allowing attackers to cause arbitrary code execution or application crashes. CInStream::GetCuSize() in the NTFS handler computes the compression-unit buffer size as (UInt32)1 << (BlockSizeLog + CompressionUnit), and a crafted image with ClusterSizeLog >= 28 and CompressionUnit == 4 drives the exponent to 32, which is undefined behavior and collapses on x86/x64 so _inBuf is allocated as 1 byte. ReadStream_FALSE then writ", "references": ["https://securitylab.github.com/advisories/GHSL-2026-140_7-Zip/", "https://sourceforge.net/p/sevenzip/discussion/45797/thread/555e132ba4", "https://nvd.nist.gov/vuln/detail/CVE-2026-48095"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2026-48092", "noindex": false, "published": "2026-06-05T13:51:55.097Z", "modified": "2026-06-08T17:08:54.213Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "severity": "medium", "epss": 0.00495, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-48092", "title": "7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116)", "description": "7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass the fragment bounds check, causing memcpy to read heap memory preceding the cache buffer into the extracted file. The vulnerability is exploitable only on 32-bit builds of 7-Zip where size_t is 32 bits, allowing the addition offsetInBlock + blockSize to wrap modulo 2³². On 64-bit builds the addition is promoted to 64 bits and the check correctly reje", "references": ["https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/", "https://nvd.nist.gov/vuln/detail/CVE-2026-48092"], "fixes": ["16.02+really26.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2025-11002", "noindex": false, "published": "2026-01-23T02:47:05.205Z", "modified": "2026-02-26T14:44:28.176Z", "cvss": 7, "cvss_vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00537, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-11002", "title": "7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability", "description": "7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26743.", "references": ["https://www.zerodayinitiative.com/advisories/ZDI-25-950/", "https://nvd.nist.gov/vuln/detail/CVE-2025-11002"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2025-11001", "noindex": false, "published": "2025-11-19T21:16:49.635Z", "modified": "2026-02-26T16:07:46.480Z", "cvss": 7, "cvss_vector": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.27387, "kev": false, "exploits": ["exploitdb", "public-poc"], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-11001", "title": "7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability", "description": "7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the handling of symbolic links in ZIP files. Crafted data in a ZIP file can cause the process to traverse to unintended directories. An attacker can leverage this vulnerability to execute code in the context of a service account. Was ZDI-CAN-26753.", "references": ["https://www.zerodayinitiative.com/advisories/ZDI-25-949/", "https://nvd.nist.gov/vuln/detail/CVE-2025-11001"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2025-55188", "noindex": false, "published": "2025-08-08T00:00:00.000Z", "modified": "2025-11-04T22:06:47.049Z", "cvss": 3.6, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "severity": "low", "epss": 0.00995, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-55188", "title": "CVE-2025-55188", "description": "7-Zip before 25.01 does not always properly handle symbolic links during extraction.", "references": ["https://sourceforge.net/p/sevenzip/discussion/45797/thread/da14cd780b/", "https://github.com/ip7z/7zip/releases/tag/25.01", "https://github.com/ip7z/7zip/compare/25.00...25.01"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2025-53817", "noindex": false, "published": "2025-07-17T18:12:24.553Z", "modified": "2025-11-04T21:12:38.546Z", "cvss": 5.5, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00709, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-53817", "title": "GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream", "description": "7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.", "references": ["https://securitylab.github.com/advisories/GHSL-2025-059_7-Zip/", "https://www.openwall.com/lists/oss-security/2025/07/18/2", "http://www.openwall.com/lists/oss-security/2025/07/18/2"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-47112", "noindex": false, "published": "2025-04-19T00:00:00.000Z", "modified": "2025-04-21T15:10:27.078Z", "cvss": 2.5, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "severity": "low", "epss": 0.00195, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-47112", "title": "CVE-2022-47112", "description": "7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected.", "references": ["https://github.com/boofish/semantic-bugs/", "https://nvd.nist.gov/vuln/detail/CVE-2022-47112"], "fixes": [], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2022-47111", "noindex": false, "published": "2025-04-19T00:00:00.000Z", "modified": "2025-04-21T15:11:24.867Z", "cvss": 2.5, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N", "severity": "low", "epss": 0.00241, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2022-47111", "title": "CVE-2022-47111", "description": "7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.", "references": ["https://github.com/boofish/semantic-bugs/", "https://nvd.nist.gov/vuln/detail/CVE-2022-47111"], "fixes": [], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2024-11612", "noindex": false, "published": "2024-11-22T20:22:10.629Z", "modified": "2024-11-26T15:13:29.515Z", "cvss": 6.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.01775, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2024-11612", "title": "7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability", "description": "7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the processing of streams. The issue results from a logic error that can lead to an infinite loop. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-24307.", "references": ["https://www.zerodayinitiative.com/advisories/ZDI-24-1606/", "https://nvd.nist.gov/vuln/detail/CVE-2024-11612"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2023-52169", "noindex": false, "published": "2024-07-03T00:00:00.000Z", "modified": "2025-11-03T21:50:23.389Z", "cvss": 8.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "severity": "high", "epss": 0.00989, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-52169", "title": "CVE-2023-52169", "description": "The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has security relevance in some known web-service use cases where untrusted users can upload files and have them extracted by a server-side 7-Zip process.", "references": ["https://sourceforge.net/p/sevenzip/bugs/2402/", "https://www.openwall.com/lists/oss-security/2024/07/03/10", "http://www.openwall.com/lists/oss-security/2024/07/03/10"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}, {"id": "CVE-2023-52168", "noindex": false, "published": "2024-07-03T00:00:00.000Z", "modified": "2025-11-03T21:50:20.788Z", "cvss": 8.4, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.00343, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2023-52168", "title": "CVE-2023-52168", "description": "The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.", "references": ["https://sourceforge.net/p/sevenzip/bugs/2402/", "https://www.openwall.com/lists/oss-security/2024/07/03/10", "http://www.openwall.com/lists/oss-security/2024/07/03/10"], "fixes": ["16.02+really25.01+dfsg-0+deb12u1"], "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}]}], "total": 29, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "p7zip", "path": "vulns/debian-12/p7zip", "ecosystem": "Debian:12"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 1, "kev": 0}, "lastmod": "2026-10-19T19:06:48.652Z", "early_advisories": [], "license": "Sie dürfen die Auswahl von PatchFirst und unsere Ergänzungen (Prioritäten, Frühwarnungen, Texte, Zusammenfassungen und Aggregate) für eigene Zwecke einschließlich interner geschäftlicher Aufgaben frei nutzen. Weiterverkauf, kommerzielle Verbreitung und massenhafte Spiegelung dieser Auswahl oder Ergänzungen erfordern eine schriftliche Vereinbarung mit dem Betreiber. Nennen Sie bei jeder Nutzung oder Veröffentlichung der Auswahl oder unserer Ergänzungen PatchFirst (https://patchfirst.dev/vulns/) mit diesem Link zur Feedseite Ihrer Region als Quelle. Originaleinträge aus offenen Quellen unterliegen weiterhin ihren jeweiligen Lizenzen und Bedingungen. Diese Bedingungen beschränken Ihre Rechte an den Originaldaten nicht, die Sie direkt bei den Quellen beziehen können.", "terms_url": "https://patchfirst.dev/de/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst wählt Einträge aus, normalisiert und kombiniert sie; Zusammenfassungen und Übersetzungen können hinzukommen. Nachrichten werden im jeweiligen Eintrag mit einem Link zur Originalquelle belegt.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Die Lizenzen der Ursprungsdatenbanken unterscheiden sich; siehe Quellenkatalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Frei zugängliche Bewertungen; Quellenangabe erbeten (FIRST EPSS, Bewertungen von Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}