Skip to content

Vendor

7-Zip vulnerabilities

37 published CVES affecting 7-Zip, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
37
Critical
1
High
22
Medium
11
Low
3
Unscored
0
CISA KEV
2
Atom feed of 7-Zip alerts

Products

Latest 7-Zip CVEs

Newest publication first · page 1 of 2

  2. CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

    Published
    CriticalCVSS 9.2 EPSS 82.6% CISA KEV added 2026-10-27 Exploited in the wild PoC

    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service,...

  6. CVE-2026-48112 GHSL-2026-122 7-Zip Ar SYMDEF OOB Read

    Published
    MediumCVSS 6.5 EPSS 0.27%

    7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol t...

  7. CVE-2026-48111 GHSL-2026-121 7-Zip UEFI DEPEX OOB Read

    Published
    HighCVSS 7.1 EPSS 2.2%

    7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parser(CPP/7zip/Archive/UefiHandler.cpp). The function validates an attac...

  8. CVE-2026-48104 GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read

    Published
    MediumCVSS 4.2 EPSS 0.18%

    7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archive handler caused by a sparsely populated index array. In the SquashFS handler, _blockToNode is allocated with capacity for every metadata b...

  9. CVE-2026-48103 GHSL-2026-119 7-Zip WIM SecurityId OOB read

    Published
    HighCVSS 7.1 EPSS 2.2%

    7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain an off-by-one heap out-of-bounds read in the WIM (Windows Imaging) archive handler's security descriptor lookup. In CHandler::GetSecurity (CPP/7zip/Archive/Wim/WimHandler.cpp), the per-ima...

  10. CVE-2026-48102 GHSL-2026-118: 7-Zip UDF Field OOB Read

    Published
    MediumCVSS 4.3 EPSS 0.19%

    7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifier Descriptor parser. In CFileId::Parse (CPP/7zip/Archive/Udf/UdfIn.cpp), after validating size < 38...

  13. CVE-2026-48092 7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116)

    Published
    HighCVSS 8.1 EPSS 2.7%

    7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offse...

  21. CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability

    Published
    HighCVSS 7.0 EPSS 47.6% CISA KEV added 2025-02-06 Exploited in the wild

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

  23. CVE-2024-11612 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability

    Published
    MediumCVSS 6.5 EPSS 1.9%

    7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may var...

  24. CVE-2023-52169 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer ar...

    Published
    HighCVSS 8.2 EPSS 0.98%

    The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a part of a filename listed in the file system image. This has se...

  25. CVE-2023-52168 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer si...

    Published
    HighCVSS 8.4 EPSS 0.34%

    The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.