7-Zip before 25.01 does not always properly handle symbolic links during extraction.
CVSS Score
3.6
EPSS Score
0.0
Published
2025-08-08
7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-07-17
7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue.
CVSS Score
7.5
EPSS Score
0.001
Published
2025-07-17