Lucene search
+L

14823 matches found

osv_ubuntu
osv_ubuntu
•added 2025/07/17 7:15 p.m.•18 views

UBUNTU-CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

7.5CVSS7AI score0.00709EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/07/17 6:12 p.m.•73 views

CVE-2025-53817 GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

6.9CVSS0.00709EPSS
SaveExploits1References2
CVE
CVE
•added 2025/07/17 6:12 p.m.•171 views

CVE-2025-53817

CVE-2025-53817 (7-Zip) : A null pointer dereference in the Compound document handler of 7-Zip prior to version 25.0.0 can cause denial of service when processing Compound Documents. Connected sources confirm the issue and that version 25.0.0 contains the fix. Affected component is the Compound ha...

7.5CVSS6.4AI score0.00709EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/17 6:12 p.m.•9 views

CVE-2025-53817 GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

6.9CVSS6.2AI score0.00709EPSS
SaveExploits1References2
Mend
Mend
•added 2025/07/17 6:12 p.m.•3 views

CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

7.5CVSS0.00709EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2025/07/17 6:12 p.m.•15 views

CVE-2025-53817 GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

6.9CVSS6.4AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/07/17 6:12 p.m.•13 views

CVE-2025-53817

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

7.5CVSS6.7AI score0.00709EPSS
SaveExploits1
Cvelist
Cvelist
•added 2025/07/17 6:09 p.m.•64 views

CVE-2025-53816 GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

6.9CVSS0.00733EPSS
SaveExploits1References2
Mend
Mend
•added 2025/07/17 6:09 p.m.•4 views

CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

7.5CVSS0.00733EPSS
SaveExploits1References4
CVE
CVE
•added 2025/07/17 6:09 p.m.•356 views

CVE-2025-53816

CVE-2025-53816: 7-Zip vulnerability in the RAR5 handler (NRar5::CDecoder) allows zeroes to be written outside the heap buffer, causing memory corruption and denial of service in versions prior to 25.0.0. The issue is fixed in 7-Zip v25.0.0. Remediation: upgrade to 25.0.0 or newer; affected compon...

7.5CVSS6.9AI score0.00733EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/17 6:09 p.m.•50 views

CVE-2025-53816 GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

6.9CVSS6.8AI score0.00733EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2025/07/17 6:09 p.m.•19 views

CVE-2025-53816 GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

6.9CVSS6.7AI score
SaveExploits0References5
Debian CVE
Debian CVE
•added 2025/07/17 6:09 p.m.•19 views

CVE-2025-53816

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

7.5CVSS7.2AI score0.00733EPSS
SaveExploits1
Kaspersky
Kaspersky
•added 2025/07/17 12:00 a.m.•96 views

KLA86579 Multiple vulnerabilities in 7-Zip

Multiple vulnerabilities were found in 7-Zip. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Memory corruption vulnerability in RAR5 handler can be exploited to cause denial of service. 2. Null pointer dereference...

7.5CVSS7.8AI score0.00733EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2025/07/17 12:00 a.m.•14 views

7-Zip 安全漏洞

7-Zip is a compression software from the 7-Zip open source. A security vulnerability exists in versions prior to 7-Zip 25.0.0 that originates from writing a zero value out of the heap buffer in the RAR5 handler, which could result in memory corruption and a denial of service...

7.5CVSS7AI score0.00733EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/07/17 12:00 a.m.•14 views

7-Zip 代码问题漏洞

7-Zip is a compression software from the 7-Zip open source. A code issue vulnerability exists in versions prior to 7-Zip 25.0.0 that stems from the presence of a null pointer dereference in the Compound handler, which could lead to a denial of service...

7.5CVSS6.6AI score0.00709EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/17 12:00 a.m.•2 views

CVE-2025-53817: NULL Pointer Dereference

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue...

7.5CVSS6.9AI score0.00709EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/17 12:00 a.m.•2 views

CVE-2025-53816: Heap-based Buffer Overflow

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue...

7.5CVSS7.2AI score0.00733EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2025/07/16 11:21 p.m.•12 views

SUSE CVE-2025-53906

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim's zip.vim plugin can allow overwriting of arbitrary files when opening specially crafted zip archives. Impact is low because this exploit requires direct user interaction. However, successful...

4.1CVSS6.8AI score0.00861EPSS
SaveExploits1References24
osv_rustsec
osv_rustsec
•added 2025/07/16 12:00 p.m.•16 views

RUSTSEC-2025-0172 `zip-extract` is unmaintained; use the `zip >= 2.4.0` crate instead

The zip-extract crate has been explicitly deprecated by its author on Jul 16, 2025, and the repository was archived on Sep 8, 2025. The author added deprecation notices README stating that the functionality is now available directly in the zip crate via ZipArchive::extract available since zip 0.6...

5.9AI score
SaveExploits0References3
Rows per page
Query Builder