CVE-2026-48112
mediumpriority · track · 0EPSS 0.003 · 19 %ileDEEURUUSEPSS · scored 2026-10-27
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (13)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2026-17367-Zip: Mehrere SchwachstellenDeutsch2026-05-28csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in 7-Zip ausnutzen, um Speicherinhalte offenzulegen, einen Denial-of-Service auszulösen oder beliebigen Code auszuführen.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (4)
External citations — patches, advisories, analysis.
- https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/cnnvd
- https://www.7-zip.org/download.htmlPatchcnnvd
- https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/enisa_euvd
- https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/ExploitPatchThird Party Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan