The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
p7zip 16.02 was discovered to contain a heap-buffer-overflow vulnerability via the function NArchive::NZip::CInArchive::FindCd(bool) at CPP/7zip/Archive/Zip/ZipIn.cpp. NOTE: the Supplier has found that this is not a buffer overflow; at most an out-of-bounds read can occur.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade p7zip | Mar 21, 2024 | Aug 22, 2023 |
| Amazon Linux Ami 2 | — | Upgrade p7zipUpgrade p7zip-debuginfoUpgrade p7zip-docUpgrade p7zip-plugins | Jul 4, 2024 | Aug 22, 2023 |
| Amazon_linux_2023 | — | Upgrade p7zip-debugsourceUpgrade p7zipUpgrade p7zip-plugins-debuginfoUpgrade p7zip-docUpgrade p7zip-plugins | Feb 17, 2025 | Aug 22, 2023 |
| Debian | — | No solution existsUpgrade p7zip | May 15, 2025 | Aug 22, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub