CVE-2023-1576
A Heap buffer overflow in CPP/7zip/Archive/Zip/ZipIn.cpp:1116 in NArchive::NZip::CInArchive:...
This is a duplicate of an earlier CVE, CVE-2022-47069.
What each source reports
CVE List No score
This is a duplicate of an earlier CVE, CVE-2022-47069.
- Record
CVE-2023-1576- Updated
- 2026-11-02
EUVDEUVD-2023-23810 No score
This is a duplicate of an earlier CVE, CVE-2022-47069.
- Record
EUVD-2023-23810- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7hvh-vgxm-72gc No score
A Heap buffer overflow in CPP/7zip/Archive/Zip/ZipIn.cpp:1116 in NArchive::NZip::CInArchive:...
A Heap buffer overflow in CPP/7zip/Archive/Zip/ZipIn.cpp:1116 in NArchive::NZip::CInArchive::FindCd(bool) was found in p7zip 16.02.
- Record
GHSA-7hvh-vgxm-72gc- Weakness
- CWE-119
- Updated
- 2026-11-02
NVD No score
Rejected reason: This is a duplicate of an earlier CVE, CVE-2022-47069.
- Record
CVE-2023-1576- Updated
- 2026-11-02
OSVSUSE-SU-2025:3791-1 No score
Security update for p7zip
This update for p7zip fixes the following issues:
- CVE-2022-47069: heap buffer overflow in
ZipIn.cppfile (bsc#1209648). - CVE-2025-53817: null pointer dereference may lead to denial of service (bsc#1246707).
- Record
SUSE-SU-2025:3791-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2023-1576 No score
** REJECT ** This is a duplicate of an earlier CVE, CVE-2022-47069.
- Record
UBUNTU-CVE-2023-1576- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
p7zipSUSE:Linux Enterprise Module for Basesystem 15 SP6 From an advisory covering 3 CVEs |
before 16.02-150200.14.15.1 | 16.02-150200.14.15.1 |
p7zipSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 3 CVEs |
before 16.02-150200.14.15.1 | 16.02-150200.14.15.1 |
p7zipopenSUSE:Leap 15.6 From an advisory covering 3 CVEs |
before 16.02-150200.14.15.1 | 16.02-150200.14.15.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-1576 has been rejected by its source and should not be treated as a live vulnerability, published September 14, 2023.