p7zip vulnerabilities (Debian)
29 vulnerabilities.
-
p7zipDebian 7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table 6.8 Medium -
p7zipDebian 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability 7.0 High -
p7zipDebian 7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision 4.8 Medium -
p7zipDebian GHSL-2026-122 7-Zip Ar SYMDEF OOB Read 6.5 Medium -
p7zipDebian GHSL-2026-121 7-Zip UEFI DEPEX OOB Read 4.3 Medium -
p7zipDebian GHSL-2026-120: 7-Zip SquashFS BlockToNode uninitialized heap read 4.2 Medium -
p7zipDebian GHSL-2026-119 7-Zip WIM SecurityId OOB read 4.3 Medium -
p7zipDebian GHSL-2026-118: 7-Zip UDF Field OOB Read 3.1 Low -
p7zipDebian GHSL-2026-117: 7-Zip UEFI Capsule uninitialized heap memory disclosure 6.5 Medium -
p7zipDebian 7-Zip SquashFS Fragment Offset Overflow (GHSL-2026-116) 4.3 Medium -
p7zipDebian GHSL-2026-140_7-Zip: 7-Zip has a heap buffer overflow via NTFS compressed stream buffer under-allocation 8.8 High -
p7zipDebian 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability 7.0 High -
p7zipDebian 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability 7.0 High -
p7zipDebian 7-Zip before 25.01 does not always properly handle symbolic links during extraction. 3.6 Low -
p7zipDebian GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream 5.5 Medium -
p7zipDebian 7-Zip through 24.09 does not report an error for certain invalid xz files, involving stream flags... 2.5 Low -
p7zipDebian 7-Zip through 24.09 does not report an error for certain invalid xz files, involving block flags... 2.5 Low -
p7zipDebian 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability 6.5 Medium -
p7zipDebian The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read... 8.2 High -
p7zipDebian The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer... 8.4 High -
p7zipDebian 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability 7.8 High -
p7zipDebian 7-Zip through 22.01 on Linux allows an integer underflow and code execution via a crafted 7Z... 7.8 High -
p7zipDebian p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function... 7.8 High -
p7zipDebian Heap-based buffer overflow in the NCompress::NShrink::CDecoder::CodeReal method in 7-Zip before... 7.8 High -
p7zipDebian Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before... 7.8 High -
p7zipDebian A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null... 7.5 High -
p7zipDebian The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta and... 8.8 High -
p7zipDebian p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive. 5.8 Medium -
p7zipDebian Unspecified vulnerability in 7-zip before 4.5.7 has unknown impact and remote attack vectors, as... 10.0 High