PT-2025-29940 · Igor Pavlov +1 · 7-Zip +1

Jarlob

+1

·

Published

2025-04-24

·

Updated

2025-08-02

·

CVE-2025-53816

CVSS v4.0
6.9
VectorAV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions:

7-Zip versions prior to 25.0.0

Description:

7-Zip is a file archiver with a high compression ratio. A flaw exists in the RAR5 handler where writing zeroes outside of the heap buffer can cause memory corruption and denial of service.

Recommendations:

Update to version 25.0.0 or later.

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

Related Identifiers

BDU:2025-08797
CVE-2025-53816

Affected Products

7-Zip
Debian