7zip vulnerabilities (Debian)
23 vulnerabilities.
-
7zipDebian 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table 6.8 Medium -
7zipDebian 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.0 High -
7zipDebian 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision 4.8 Medium -
7zipDebian GHSL-2026-122 7-Zip Ar SYMDEF OOB Read 6.5 Medium -
7zipDebian GHSL-2026-121 7-Zip UEFI DEPEX OOB Read 4.3 Medium -
7zipDebian GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read 4.2 Medium -
7zipDebian GHSL-2026-119 7-Zip WIM SecurityId OOB read 4.3 Medium -
7zipDebian GHSL-2026-118: 7-Zip UDF Field OOB Read 3.1 Low -
7zipDebian GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure 6.5 Medium -
7zipDebian 7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116) 4.3 Medium -
7zipDebian GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation 8.8 High -
7zipDebian 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability 7.0 High -
7zipDebian 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability 7.0 High -
7zipDebian 7-Zip before 25.01 does not always properly handle symbolic links during extraction. 3.6 Low -
7zipDebian GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream 5.5 Medium -
7zipDebian 7-Zip through 24.09 does not report an error for certain invalid xz files, involving stream flags... 2.5 Low -
7zipDebian 7-Zip through 24.09 does not report an error for certain invalid xz files, involving block flags... 2.5 Low -
7zipDebian 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability 7.8 High -
7zipDebian 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability 6.5 Medium -
7zipDebian The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read... 8.2 High -
7zipDebian The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer... 8.4 High -
7zipDebian 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High -
7zipDebian 7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z... 7.8 High