Skip to main content

7-Zip CVE-2025-53816

MEDIUM
Heap-based Buffer Overflow (CWE-122)
2025-07-17 security-advisories@github.com
Buffer Overflow Denial Of Service Heap Overflow 7 Zip Suse
5.5
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

2
Analysis Generated
May 11, 2026 - 18:45 vuln.today
CVE Published
Jul 17, 2025 - 19:15 nvd
MEDIUM 5.5

DescriptionNVD

7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue.

AnalysisAI

Heap buffer overflow in 7-Zip's RAR5 handler writes zeroes beyond allocated heap memory, causing memory corruption and denial of service in versions prior to 25.0.0. Local attackers can trigger this vulnerability by crafting malicious RAR5 archive files. Publicly available exploit code exists, making this a moderate-priority local vulnerability despite its network-isolated attack surface.

Technical ContextAI

7-Zip's RAR5 archive handler contains a buffer overflow vulnerability (CWE-122: Heap-based buffer overflow) where write operations to heap memory exceed the allocated buffer boundaries. The vulnerability is specifically triggered during RAR5 file format parsing when the handler attempts to write zero bytes to heap memory. This is a classic heap corruption issue distinct from stack-based overflows, with memory safety implications that extend beyond the immediate write operation due to heap metadata corruption potential. The affected component is the RAR5 decompression and parsing logic in 7-Zip versions before 25.0.0.

RemediationAI

Upgrade to 7-Zip version 25.0.0 or later immediately. This version contains the fix for the heap buffer overflow in the RAR5 handler. For systems where immediate upgrade is not feasible, restrict access to untrusted RAR5 archives and implement file-level integrity monitoring to detect unexpected archive modifications. If using 7-Zip in automated workflows or scripts, validate archive sources and disable RAR5 support temporarily if alternative archive formats are available. Users should avoid opening RAR5 files from untrusted sources until patched. Debian users should apply updates from the debian-lts-announce security advisory.

More from same product – last 7 days

CVE-2026-9256 HIGH
8.1 May 22

Heap buffer overflow in NGINX Plus and NGINX Open Source ngx_http_rewrite_module allows unauthenticated remote attackers

Vendor StatusVendor

Share

CVE-2025-53816 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy