Skip to content
OpenAdvisories

Vendor

rikyoz

3 known vulnerabilities.

Products

bit7z 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.6
    CVE-2026-45380

    bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`

    bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, a one-byte off-by-one error in SafeOutPathBuilder::restoreSymlink() allows an attacker to craft a .7z archive that, when extracted w…

    rikyoz bit7z