7-Zip Multiple Vulnerabilities (Apr 2025) - Windows

7zip is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:7-zip:7-zip"; ifdescription...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

CVE-2022-47111

CVE-2022-47111 affects 7-Zip, specifically version 22.01, which does not report errors for certain invalid xz files (issues relate to block flags and reserved bits). Some later versions are unaffected. Multiple connected sources corroborate the core description across NVD, OSV, Debian/Ubuntu trac...

CVE-2022-47112

7-Zip 22.01 is affected by CVE-2022-47112: it does not report an error for certain invalid xz files due to issues with stream flags and reserved bits. Some later versions are unaffected. Affected product: 7-Zip 22.01; root cause: inability to report errors for specific malformed xz inputs. Impact...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

PT-2025-17392 · 7 Zip +3 · 7-Zip +2

Name of the Vulnerable Software and Affected Versions: 7-Zip versions 22.01 through 24.09 Description: The issue involves 7-Zip not reporting an error for certain invalid xz files, specifically those with issues related to block flags and reserved bits. Recommendations: For versions 22.01 through...

CVE-2022-47111

7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected...

CVE-2022-47112

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected...

Ubuntu 22.04 LTS / 24.04 LTS : 7-Zip vulnerabilities (USN-7438-1)

The remote Ubuntu 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7438-1 advisory. Igor Pavlov discovered that 7-Zip had several memory-related issues. An attacker could possibly use these issues to cause 7-Zip to crash,...

USN-7438-1: 7-Zip vulnerabilities

Igor Pavlov discovered that 7-Zip had several memory-related issues. An attacker could possibly use these issues to cause 7-Zip to crash, resulting in a denial of service, or execute arbitrary code. CVE-2023-52168, CVE-2023-52169...

Exploit for Protection Mechanism Failure in 7-Zip

🚀 7-Zip-CVE-2025-0411-POC Repository Welcome to the official...

Linux Distros Unpatched Vulnerability : CVE-2023-52169

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 for 7zz contains an out-of-bounds read that allows an attacker to read beyond the intended buffer. The...

Linux Distros Unpatched Vulnerability : CVE-2024-11612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected...

Linux Distros Unpatched Vulnerability : CVE-2023-40481

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on...