CVE-2025-53816

🗓️ 17 Jul 2025 18:09:58Reported by Debian Security Bug TrackerType

7-Zip prior to version 25.0.0 suffers memory corruption risk due to zeroes written outside heap buffer

Reporter	Title	Published	Views	Family All 46
Tenable Nessus	7-Zip < 25.00	23 Jul 202500:00	–	nessus
Tenable Nessus	Debian dla-4577 : p7zip-rar - security update	11 May 202600:00	–	nessus
Tenable Nessus	Fedora 43 : retroarch (2025-6e0627440a)	25 Dec 202500:00	–	nessus
Tenable Nessus	Fedora 43 : 7zip (2025-b6422d64f9)	3 Dec 202500:00	–	nessus
Tenable Nessus	Fedora 42 : retroarch (2025-dda924d757)	25 Dec 202500:00	–	nessus
Tenable Nessus	FreeBSD : 7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder (80411ba2-6729-11f0-a5cb-8c164580114f)	23 Jul 202500:00	–	nessus
Tenable Nessus	openSUSE 16 Security Update : 7zip (openSUSE-SU-2026:20273-1)	2 Mar 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2025-53816	15 Aug 202500:00	–	nessus
FreeBSD	7-Zip -- Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder	17 Jul 202500:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM Omnifind Text Search Server for DB2 for i is affected by multiple vulnerabilities[CVE-2017-12626,CVE-2023-44483,CVE-2023-45853,CVE-2024-8176,CVE-2024-11612,CVE-2024-50602,CVE-2025-27363,CVE-2025-29482,CVE-2025-48924,CVE-2025-53816]	20 Jun 202601:15	–	ibm

OS	OS Version	Architecture	Package	Package Version	Filename
Debian	13	any	7zip-rar	25.00+ds-1	7zip-rar_25.00+ds-1_any.deb
Debian	14	any	7zip-rar	25.00+ds-1	7zip-rar_25.00+ds-1_any.deb
Debian	999	any	7zip-rar	25.00+ds-1	7zip-rar_25.00+ds-1_any.deb
Debian	11	any	p7zip-rar	16.02+really25.00+ds-0+deb11u1	p7zip-rar_16.02+really25.00+ds-0+deb11u1_any.deb
Debian	12	any	p7zip-rar	16.02+really25.00+ds-0+deb12u1	p7zip-rar_16.02+really25.00+ds-0+deb12u1_any.deb
Debian	13	any	p7zip-rar	16.02+transitional.1	p7zip-rar_16.02+transitional.1_any.deb

17 Jul 2025 18:09Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

CVSS 46.9

EPSS0.00635

SSVC