Multiple 7-Zip Vulnerabilities Discovered by Talos
Summary: Cisco Talos discovered multiple exploitable vulnerabilities in 7-Zip, an open-source archiving tool supported on all major platforms, including an out-of-bounds read in UDF file handling and a heap overflow in HFS+ zlib decompression. Talos worked with 7-Zip to responsibly disclose and patch the flaws, and users are urged to update to version 16.00.
Bottom line: Talos notes that vendors may not know they are using the affected libraries, which is of particular concern for security devices and antivirus products, so the number of affected products and appliances may be larger than users expect.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026