CVE-2026-104086

7-Zip versions prior to 26.03 are vulnerable to an uninitialized memory disclosure vulnerability within the SquashFS v4 archive handler (specifically in SquashfsHandler.cpp). An attacker can craft a malicious archive where the superblock’s no_ids field causes a miscomputation of the final metadat...