2.5Low

CVE-2022-47112

7-Zip 7-Zip Published: 2025-04-19 03:00 (1 year ago)

Description

7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected.

Weakness (CWE): CWE-754

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
7-Zip	7-Zip	22.01

References and patches

https://github.com/boofish/semantic-bugs/ ExploitThird Party Advisory

CPE matches (NVD) (1)

cpe:2.3:a:7-zip:7-zip:22.01:*:*:*:*:*:*:*

CVSS score

2.5Low

Source: mitre · CVSS 3.1

Attack vector: Local
Attack complexity: High
Privileges required: None
User interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

All scores (3)

cna	CVSS 3.1	2.5Low
cve@mitre.org	CVSS 3.1	2.5Low
nvd	CVSS 3.1	3.3Low

EPSS (chance of exploitation in 30 days)

0.20%

higher than 10% of all CVEs

CISA assessment (SSVC)

Exploitation: poc
Automatable: no
Technical impact: partial

Timeline

ID reserved2022-12-12
Published2025-04-19 03:00
Reached IP-DB2026-10-24 23:37
Last updated2026-06-17 08:13

Assigned by (CNA): mitre
NVD status: Analyzed

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — 7-Zip

7.8High

CVE-2026-125742 4 days ago

7-Zip before 26.06 Heap Out-of-Bounds Write via LZX Decoder in CAB Extraction

7-Zip 7-Zip

7-Zip before 26.06 contains a heap out-of-bounds write vulnerability in the LZX decoder that lets attackers corrupt memory when a continuation CAB volume declares a smaller window. Attackers can entice victims to extract crafted multi-volume CAB archives, whe…

5.5Medium

CVE-2026-104086 1 month ago

7-Zip < 26.03 SquashFS Uninitialized Memory Disclosure via UID/GID Table

7-Zip 7-Zip

7-Zip before 26.03 contains an uninitialized memory disclosure vulnerability in the SquashFS v4 archive handler (SquashfsHandler.cpp) that allows attackers to leak heap memory by crafting a malicious archive where the superblock’s no_ids field is set so that …

7.0High

CVE-2026-14266 3 months ago

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

7-Zip 7-Zip

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that …

3.3Low

CVE-2026-58052 4 months ago

7-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision

7-Zip 7-Zip

7-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppresses an archive-supplied Zone.Identifier stream matches the exact name 'Zone.Identifier' while a RAR5 STM record named '…

6.5Medium

CVE-2026-48112 5 months ago

GHSL-2026-122 7-Zip Ar SYMDEF OOB Read

mcmilk 7-Zip

7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-sty…

4.3Medium

CVE-2026-48111 5 months ago

GHSL-2026-121 7-Zip UEFI DEPEX OOB Read

mcmilk 7-Zip

7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability in the ParseDepedencyExpression function of the UEFI firmware image parser(CPP/7zip/Archive/UefiHandler.cpp). The functi…

2.2%EPSS