PT-2025-29940 · Igor Pavlov+2 · 7-Zip+2

Jarlob + 1 · Publicado 2025-04-24 · Atualizado 2026-02-26 · CVE-2025-53816

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions 7-Zip versions prior to 25.0.0

Description 7-Zip is a file archiver with a high compression ratio. A flaw exists in the RAR5 handler where writing zeroes outside of the heap buffer can cause memory corruption and denial of service.

Recommendations Update to version 25.0.0 or later.

Exploit

Correção

DoS

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-122

Identificadores relacionados

BDU:2025-08797

CVE-2025-53816

OPENSUSE-SU-2025:15523-1

OPENSUSE-SU-2026:20273-1

SUSE-SU-2026:20592-1

Produtos afetados

7-Zip

Debian

Red Os

Referências · 43

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53816.json · Exploit
• 🔥 https://openwall.com/lists/oss-security/2025/07/18/1 · Exploit
• 🔥 https://securitylab.github.com/advisories/GHSL-2025-058_7-Zip · Exploit
• https://twitter.com/VaultEdgeIT/status/1947268190930628667 · Publicação no Twitter
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE312 · Aviso do Fabricante
• https://osv.dev/vulnerability/SUSE-SU-2026:20592-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2025:15523-1 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-53816 · Aviso do Fabricante
• https://reddit.com/r/CVEWatch/comments/1m6a2hn/top_10_trending_cves_22072025 · Publicação no Reddit
• https://twitter.com/UndercodeNews/status/1947223921247330372 · Publicação no Twitter
• https://twitter.com/oss_security/status/1947744560538423482 · Publicação no Twitter
• https://osv.dev/vulnerability/openSUSE-SU-2026:20273-1 · Aviso do Fabricante
• https://bugzilla.suse.com/1246706 · Nota
• https://bugzilla.suse.com/1246707 · Nota
• https://ubuntu.com/security/CVE-2025-53816 · Aviso do Fabricante