Every CVE Search/ Get API key

CVE-2016-2335

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and...

8.8 HighFix available

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

9.79%Up 4.6 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 8.8

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
CVE-2016-2335
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
CVE-2016-2335
Updated
2026-11-02
EUVDEUVD-2016-3419 No score

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
EUVD-2016-3419
Updated
2026-11-03
GitHub AdvisoriesGHSA-p2xg-m23c-2mm9 8.8

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and...

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
GHSA-p2xg-m23c-2mm9
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-119
Updated
2026-11-02
OSV 8.8

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
CVE-2016-2335
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2016-2335 8.8

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
DEBIAN-CVE-2016-2335
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 5 moreShow less
OSVUBUNTU-CVE-2016-2335 8.8

The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and p7zip allows remote attackers to cause a denial of service (out-of-bounds read) or execute arbitrary code via the PartitionRef field in the Long Allocation Descriptor in a UDF file.

Record
UBUNTU-CVE-2016-2335
CVSS 3.0
8.8 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2016-0202 No score

Updated p7zip packages fix CVE-2016-2335

Updated p7zip package fixes security vulnerability:

An out of bound read vulnerability exists in the CInArchive::ReadFileItem method functionality of 7zip for handling UDF files that can lead to denial of service or code execution (CVE-2016-2335).

Record
MGASA-2016-0202
Updated
2026-11-02
OSVopenSUSE-SU-2024:10322-1 No score

p7zip-16.02-2.1 on GA media

These are all security issues fixed in the p7zip-16.02-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10322-1
Updated
2026-11-02
OSVSUSE-SU-2016:1593-1 No score

Security update for p7zip

This update for p7zip fixes the following issues:

  • add p7zip-9.20.1-CVE-2016-2335.patch to fix 7zip UDF CInArchive::ReadFileItem code execution vulnerability [bsc#979823], [CVE-2016-2335]
Record
SUSE-SU-2016:1593-1
Updated
2026-11-02
OSVUSN-3913-1 No score

p7zip vulnerabilities

It was discovered that p7zip did not correctly handle certain malformed archives. If a user or automated system were tricked into processing a specially crafted archive with p7zip, then p7zip could be made to crash, possibly leading to abitrary code execution.

Record
USN-3913-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
p7zip
Debian:12
 before 15.14.1+dfsg-2
15.14.1+dfsg-2
p7zip
Debian:13
 before 15.14.1+dfsg-2
15.14.1+dfsg-2
p7zip
Debian:7
 before 9.20.1~dfsg.1-4+deb7u2, plus listed versions
9.20.1~dfsg.1-49.20.1~dfsg.1-4+deb7u1
9.20.1~dfsg.1-4+deb7u2
p7zip
Debian:8
 before 9.20.1~dfsg.1-4.1+deb8u2, plus listed versions
9.20.1~dfsg.1-4.19.20.1~dfsg.1-4.1+deb8u1
9.20.1~dfsg.1-4.1+deb8u2
p7zip
Mageia:5
 before 9.20.1-6.2.mga5
9.20.1-6.2.mga5
p7zip
SUSE:Linux Enterprise Desktop 12
 before 9.20.1-6.1
9.20.1-6.1
p7zip
SUSE:Linux Enterprise Desktop 12 SP1
 before 9.20.1-6.1
9.20.1-6.1
p7zip
SUSE:Linux Enterprise Server 12
 before 9.20.1-6.1
9.20.1-6.1
p7zip
SUSE:Linux Enterprise Server for SAP Applications 12
 before 9.20.1-6.1
9.20.1-6.1
p7zip
SUSE:Linux Enterprise Server 12 SP1
 before 9.20.1-6.1
9.20.1-6.1
Show 4 moreShow less
Affected packages
PackageAffectedFixed
p7zip
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
 before 9.20.1-6.1
9.20.1-6.1
p7zip
Ubuntu:14.04:LTS
 before 9.20.1~dfsg.1-4+deb7u2build0.14.04.1, plus listed versions
9.20.1~dfsg.1-49.20.1~dfsg.1-4+deb7u1build0.14.04.1
9.20.1~dfsg.1-4+deb7u2build0.14.04.1
p7zip
Ubuntu:16.04:LTS
 before 9.20.1~dfsg.1-4.2ubuntu0.1, plus listed versions
9.20.1~dfsg.1-4.2
9.20.1~dfsg.1-4.2ubuntu0.1
p7zip
openSUSE:Tumbleweed
 before 16.02-2.1
16.02-2.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2016-2335 is a high vulnerability (CVSS 8.8) in 7-zip, published May 21, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.79%, the 95th percentile. Fixed in p7zip 15.14.1+dfsg-2.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open