UBUNTU-CVE-2026-125742: Medium severity ubuntu/p7zip vulnerability
7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, where a stale pos value bypasses bounds checks, enabling arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to convince a victim to extract a crafted multi-volume CAB archive. The malicious archive uses a continuation volume that declares a smaller LZX window.
Who is exposed to this vulnerability?
Systems using affected Ubuntu p7zip or 7zip installations are exposed when users extract untrusted multi-volume CAB archives. Successful exploitation can corrupt memory and may enable arbitrary code execution.
Are single-volume CAB archives affected?
The described exploit condition requires a crafted multi-volume CAB archive with a continuation CAB volume. The provided information does not identify single-volume CAB archives as affected.