CVE-2022-47111: Low severity 7-zip vulnerability
Published Apr 19, 2025
·Updated
7-Zip 22.01 does not report an error for certain invalid xz files, involving block flags and reserved bits. Some later versions are unaffected.
Affected Software
2 affected components
7-Zip 7-Zip=22.01
7-Zip 7-Zip=22.01
Event History
Apr 19, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-47111?
The severity of CVE-2022-47111 is classified as medium.
2
How do I fix CVE-2022-47111?
To fix CVE-2022-47111, upgrade to 7-Zip version 24.10 or later.
3
What does CVE-2022-47111 affect?
CVE-2022-47111 affects 7-Zip versions up to and including 24.09.
4
What type of files does CVE-2022-47111 involve?
CVE-2022-47111 involves certain invalid xz files, specifically those dealing with block flags and reserved bits.
5
Is CVE-2022-47111 exploitable?
CVE-2022-47111 may cause unintended behavior but is not directly exploitable for remote code execution.