CVE-2026-48112
Published: June 5th, 2026
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in the Unix ar archive parser in 7-Zip. When parsing a BSD-style __.SYMDEF symbol table, the ParseLibSymbols function reads a 32-bit namesSize field via Get32 at a position that can equal the buffer size, reading 4 bytes past the end of the heap allocation. This reads uninitialized heap data under the default allocator. Version 26.01 patches the issue.
MEDIUM
CVSS v3: 6.5
CVSS v3: 6.5
Status
| DocFilters Release | Package | State | Justification | Comment |
|---|---|---|---|---|
| 26.3 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 26.2 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 26.1 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 25.4 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 25.3 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 25.2 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 25.1 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 24.4 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 24.4.0 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 24.3 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 24.2 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 24.1 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 23.3 | 7-zip (23.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 23.2 | 7-zip (17.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 23.1 | 7-zip (17.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
| 22.4 | 7-zip (17.01) | Not Affected | Code Not Present | The vulnerability exists in the Ar handler (ParseLibSymbols in ArHandler.cpp), which parses Unix ar archives and BSD-style __.SYMDEF symbol tables and is part of the full 7-Zip application, not the LZMA SDK. Document Filters consumes LZMA SDK 23.01, whose Archive directory ships only the 7z, LZMA, XZ, and Split handlers; ArHandler.cpp does not exist in the SDK distribution and is not included in the Document Filters build source list (external/CMakeLists.txt, which compiles only the 7z, LZMA, and XZ handlers). The vulnerable ParseLibSymbols function is therefore never compiled or reachable. |
Severity score breakdown
Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
NONE
Base Score
6.5
Base Severity
MEDIUM
Confidentiality Impact
HIGH
Integrity Impact
NONE
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
REQUIRED
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Version
3.1