7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability

7-Zip before 25.01 does not always properly handle symbolic links during extraction.

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected.

7-Zip Mark-of-the-Web Bypass Vulnerability

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability

7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The bytes read beyond the intended buffer are presented as a pa…

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2,…

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability