9 matches found
CVE-2026-14266
CVE-2026-14266 Poc: 7-Zip XZ Heap Buffer Overflow PoC Generator Proof of Concept generator for reproducing the XZ heap buffer overflow vulnerability in 7-Zip. The script creates a specially crafted .xz archive designed to reproduce the crash condition in the vulnerable multi-threaded XZ...
CVE-2026-14266
CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Critical Severity | CVSS: 8.8 High | CWE-122: Heap-based Buffer Overflow Affected: 7-Zip ≤ 26.01 | Patched: 7-Zip 26.02 2026-06-25 Discovered & Analyzed by: Li Yuxuan liyuxuan504-byte and team Executive Summary A heap buffer overflow exists i...
Exploit for CVE-2026-14266
CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Cr...
Exploit for CVE-2026-14266
CVE-2026-14266: 7-Zip XZ Heap Buffer Overflow PoC Generator P...
Siemens SIMATIC S7-1500 Premature Release of Resource During Expected Lifetime (CVE-2025-31115)
The threaded .xz decoder in liblzma has a vulnerability that can at least result in a crash denial of service. The effects include heap use after free and writing to an address based on the null pointer plus an offset. This plugin only works with Tenable.ot. Please visit...
FreeBSD : FreeBSD -- Use-after-free in multi-threaded xz decoder (7642ba72-5abf-11f0-87ba-002590c1f29c)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 7642ba72-5abf-11f0-87ba-002590c1f29c advisory. A worker thread could free its input buffer after decoding, while the main thread might still be writin...
FreeBSD-SA-25:06.xz
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-25:06.xz Security Advisory The FreeBSD Project Topic: Use-after-free in multi-threaded xz decoder Category: contrib Module: xz Announced: 2025-07-02 Affects:...
Oracle Linux 10 : xz (ELSA-2025-7524)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7524 advisory. - Fix: heap-use-after-free bug in threaded .xz decoder CVE-2025-31115 Tenable has extracted the preceding description block directly from the Oracle Linux...
