7-Zip UEFI Dependency Parser Heap Buffer Overflow DoS

The vulnerability of the ParseDependencyExpression function in the 7-Zip UEFI dependency parser involves reading data beyond the permitted range of memory. Exploiting this vulnerability could allow a malicious actor to cause system failures...

CVE-2026-48111

7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parserCPP/7zip/Archive/UefiHandler.cpp. The function validates an attacker-controlled opco...

7-Zip security vulnerabilities

7-Zip is a compression software developed under open source. Versions 9.21 to 26.00 of 7-Zip contain security vulnerabilities. These vulnerabilities stem from a memory leak in the UEFI parser, which allows attackers to exploit the uninitialized memory by truncating files, thereby exposing unread...