PT-2023-17092 · P7Zip · P7Zip

Published 2023-09-14 · Updated 2025-10-24 · CVE-2023-1576

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions p7zip version 16.02

Description A heap buffer overflow was found in the p7zip software. The issue is related to the function NArchive::NZip::CInArchive::FindCd(bool) in the file ZipIn.cpp.

Recommendations For p7zip version 16.02, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-1576

SUSE-SU-2025:3791-1

Affected Products

P7Zip

References · 12

• https://ubuntu.com/security/CVE-2023-1576 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1576 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3791-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-1576 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-1576 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-53817 · Note
• https://suse.com/security/cve/CVE-2022-47069 · Note
• https://suse.com/support/update/announcement/2025/suse-su-20253791-1 · Note
• https://bugzilla.suse.com/1209648 · Note
• https://twitter.com/CVEnew/status/1702379955634495810 · Twitter Post
• https://suse.com/security/cve/CVE-2023-1576 · Note
• https://bugzilla.suse.com/1246707 · Note