Skip to content
OpenAdvisories

Package · Debian

p7zip

30 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-58052

    7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

    7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named '…

    7-Zip 7-Zip p7zip 7zip Debian
  • Low 3.1
    CVE-2026-48102

    GHSL-2026-118: 7-Zip UDF Field OOB Read

    7-Zip is a file archiver with a high compression ratio. Versions 9.11 through 26.00 contain a heap out-of-bounds read of up to 3 bytes in the UDF disc image handler's File Identifier Descriptor parser. In CFileId::Parse (CPP/7zip/Archive/Udf/UdfIn.cpp), after…

    mcmilk 7-Zip p7zip 7zip Debian Ubuntu Alpine
  • Low 3.6
    CVE-2025-55188 Public exploit

    7-Zip before 25.01 does not always properly handle symbolic links during extraction.

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  • Low 2.5
    CVE-2022-47111

    7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later …

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu
  • Low 2.5
    CVE-2022-47112

    7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later…

    7-Zip 7-Zip p7zip 7zip Debian Ubuntu