CVE-2026-102514

A flaw was found in PeaZip. When decompressing PEA archives, the application fails to properly validate compressed block sizes, resulting in an out-of-bounds write vulnerability. By convincing a victim to open or extract a specially crafted archive file, an attacker could exploit this flaw to...

CVE-2026-102514: Out-of-bounds Write

Out-of-bounds Write CWE-787 in the PEA archive extraction routine pea.pas, unpeaprocedure of the first-party pea component in PeaZip 11.2.0 and earlier allows an attacker who convinces a victim to open or extract a crafted .pea archive to execute arbitrary code as the user running PeaZip. While...