Поиск уязвимостей
Количество 10
Количество 10
CVE-2026-48092
7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass the fragment bounds check, causing memcpy to read heap memory preceding the cache buffer into the extracted file. The vulnerability is exploitable only on 32-bit builds of 7-Zip where size_t is 32 bits, allowing the addition offsetInBlock + blockSize to wrap modulo 2³². On 64-bit builds the addition is promoted to 64 bits and the check correctly rejects the input. Version 26.01 patches the issue.
CVE-2026-48092
7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass the fragment bounds check, causing memcpy to read heap memory preceding the cache buffer into the extracted file. The vulnerability is exploitable only on 32-bit builds of 7-Zip where size_t is 32 bits, allowing the addition offsetInBlock + blockSize to wrap modulo 2³². On 64-bit builds the addition is promoted to 64 bits and the check correctly rejects the input. Version 26.01 patches the issue.
CVE-2026-48092
7-Zip is a file archiver with a high compression ratio. Versions 9.34 ...
BDU:2026-07874
Уязвимость функции ReadBlock обработчика файлов SquashFS архиватора 7-Zip, позволяющая нарушителю раскрыть конфиденциальную информацию
ROS-20260921-80-0121
Уязвимость 7zip
ROS-20260921-73-0098
Уязвимость 7zip
openSUSE-SU-2026:21038-1
Security update for 7zip
SUSE-SU-2026:2696-1
Security update for 7zip
ALT-PU-2026-6896
ALT-PU-2026-6896: package `7-zip` update to version 26.01-alt1
ALT-PU-2026-13491
ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-48092 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass the fragment bounds check, causing memcpy to read heap memory preceding the cache buffer into the extracted file. The vulnerability is exploitable only on 32-bit builds of 7-Zip where size_t is 32 bits, allowing the addition offsetInBlock + blockSize to wrap modulo 2³². On 64-bit builds the addition is promoted to 64 bits and the check correctly rejects the input. Version 26.01 patches the issue. | CVSS3: 8.1 | 3% Низкий | 5 месяцев назад |
 | CVE-2026-48092 7-Zip is a file archiver with a high compression ratio. Versions 9.34 through 26.00 contain a heap memory disclosure via SquashFS fragment offset integer overflow on 32-bit builds. 32-bit integer overflow in the SquashFS ReadBlock function allows an attacker-controlled node.Offset value to bypass the fragment bounds check, causing memcpy to read heap memory preceding the cache buffer into the extracted file. The vulnerability is exploitable only on 32-bit builds of 7-Zip where size_t is 32 bits, allowing the addition offsetInBlock + blockSize to wrap modulo 2³². On 64-bit builds the addition is promoted to 64 bits and the check correctly rejects the input. Version 26.01 patches the issue. | CVSS3: 8.1 | 3% Низкий | 5 месяцев назад |
| CVE-2026-48092 7-Zip is a file archiver with a high compression ratio. Versions 9.34 ... | CVSS3: 8.1 | 3% Низкий | 5 месяцев назад |
 | BDU:2026-07874 Уязвимость функции ReadBlock обработчика файлов SquashFS архиватора 7-Zip, позволяющая нарушителю раскрыть конфиденциальную информацию | CVSS3: 4.3 | 3% Низкий | 7 месяцев назад |
 | ROS-20260921-80-0121 Уязвимость 7zip | CVSS3: 4.3 | 3% Низкий | около 2 месяцев назад |
| ROS-20260921-73-0098 Уязвимость 7zip | CVSS3: 4.3 | 3% Низкий | около 2 месяцев назад |
 | openSUSE-SU-2026:21038-1 Security update for 7zip | 5 месяцев назад | ||
| SUSE-SU-2026:2696-1 Security update for 7zip | 4 месяца назад | ||
| ALT-PU-2026-6896 ALT-PU-2026-6896: package `7-zip` update to version 26.01-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-13491 ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу