Fluid Attacks Database

Description

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
debian 14	7zip	>=0 <23.01+dfsg-1	23.01+dfsg-1
debian 12	7zip	=22.01+dfsg-10~exp1 \|\| =22.01+dfsg-8 \|\| =22.01+dfsg-8+deb12u1 \|\| =22.01+dfsg-9 \|\| >=0 <22.01+really25.01+dfsg-0+deb12u1	22.01+really25.01+dfsg-0+deb12u1
debian 13	7zip	>=0 <23.01+dfsg-1	23.01+dfsg-1
debian 13	p7zip	>=0 <16.02+transitional.1	16.02+transitional.1
debian 12	p7zip	=16.02+dfsg-8 \|\| >=0 <16.02+really25.01+dfsg-0+deb12u1	16.02+really25.01+dfsg-0+deb12u1

Aliases

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.