Fluid Attacks Database

Description

7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 12	7zip	=22.01+dfsg-10~exp1 \|\| =22.01+dfsg-8 \|\| =22.01+dfsg-8+deb12u1 \|\| =22.01+dfsg-9 \|\| >=0 <22.01+really25.01+dfsg-0+deb12u1	22.01+really25.01+dfsg-0+deb12u1
debian 13	7zip	=24.09+dfsg-8 \|\| >=0 <25.00+dfsg-1	25.00+dfsg-1
debian 14	7zip	=24.09+dfsg-8 \|\| >=0 <25.00+dfsg-1	25.00+dfsg-1
debian 12	p7zip	=16.02+dfsg-8 \|\| >=0 <16.02+really25.01+dfsg-0+deb12u1	16.02+really25.01+dfsg-0+deb12u1
debian 13	p7zip	>=0 <16.02+transitional.1	16.02+transitional.1

Aliases

1. CVE-2025-538172. NVD-2025-538173. OSV-DEBIAN-2025-538174. OSV-2025-538175. SECURITY-TRACKER-CVE-2025-53817

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.