GHSL-2026-115: –GHSL-2026-122: Various memory access violations in 7-Zip
The 7-Zip project, version 26.00, contains various memory access violations, out-of-bounds (OOB) read issues, uninitialized memory vulnerabilities, integer overflow flaws in various archive formats (e.g., 7z, SquashFS, UDF, UEFI, WIM, and Ar), and path traversal in sample app, which could potentially lead to compromising system integrity or accessing sensitive data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of GHSL-2026-115?
The severity of GHSL-2026-115 is rated at 57, indicating a moderate risk due to various memory access violations.
How do I fix GHSL-2026-115?
To fix GHSL-2026-115, it is recommended to update to the latest version of 7-Zip that addresses the reported vulnerabilities.
What types of vulnerabilities are present in GHSL-2026-115?
GHSL-2026-115 contains various memory access violations, including out-of-bounds reads, uninitialized memory vulnerabilities, and integer overflow flaws.
What versions of 7-Zip are affected by GHSL-2026-115?
GHSL-2026-115 affects version 26.00 of 7-Zip and potentially earlier versions.
Is there a known exploit for GHSL-2026-115?
As of the date published, there are no public exploits reported specifically for GHSL-2026-115.