Поиск уязвимостей
Количество 9
Количество 9
CVE-2026-48112
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue.
CVE-2026-48112
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue.
CVE-2026-48112
7-Zip is a file archiver with a high compression ratio. Versions 9.18 ...
BDU:2026-07871
Уязвимость функции ParseLibSymbols() архиватора 7-Zip, позволяющая нарушителю раскрыть защищаемую информацию
ROS-20261106-80-0040
Уязвимость 7zip
openSUSE-SU-2026:21038-1
Security update for 7zip
SUSE-SU-2026:2696-1
Security update for 7zip
ALT-PU-2026-6896
ALT-PU-2026-6896: package `7-zip` update to version 26.01-alt1
ALT-PU-2026-13491
ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-48112 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue. | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
 | CVE-2026-48112 7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue. | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
| CVE-2026-48112 7-Zip is a file archiver with a high compression ratio. Versions 9.18 ... | CVSS3: 6.5 | 0% Низкий | 5 месяцев назад |
 | BDU:2026-07871 Уязвимость функции ParseLibSymbols() архиватора 7-Zip, позволяющая нарушителю раскрыть защищаемую информацию | CVSS3: 4.3 | 0% Низкий | 7 месяцев назад |
 | ROS-20261106-80-0040 Уязвимость 7zip | CVSS3: 4.3 | 0% Низкий | 7 дней назад |
 | openSUSE-SU-2026:21038-1 Security update for 7zip | 5 месяцев назад | ||
| SUSE-SU-2026:2696-1 Security update for 7zip | 5 месяцев назад | ||
| ALT-PU-2026-6896 ALT-PU-2026-6896: package `7-zip` update to version 26.01-alt1 | CVSS3: 8.8 | 6 месяцев назад | |
| ALT-PU-2026-13491 ALT-PU-2026-13491: package `7-zip` update to version 26.02-alt1 | CVSS3: 8.8 | 3 месяца назад |
Уязвимостей на страницу