vulnerability

FreeBSD: VID-80411ba2-6729-11f0-a5cb-8c164580114f (CVE-2025-53816): 7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jul 22, 2025
Added
Jul 23, 2025
Modified
Dec 10, 2025

Description

[email protected] reports: 7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.

Solution

freebsd-upgrade-package-7-zip
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.