CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0CVE-2025-53817 – GHSL-2025-059 - 7-Zip - Null pointer array write attempt in NArchive::NCom::CHandler::GetStream
https://notcve.org/view.php?id=CVE-2025-53817
17 Jul 2025 — 7-Zip is a file archiver with a high compression ratio. 7-Zip supports extracting from Compound Documents. Prior to version 25.0.0, a null pointer dereference in the Compound handler may lead to denial of service. Version 25.0.0 contains a fix cor the issue. • https://securitylab.github.com/advisories/GHSL-2025-059_7-Zip • CWE-476: NULL Pointer Dereference •
CVSS: 7.7EPSS: 0%CPEs: 1EXPL: 0CVE-2025-53816 – GHSL-2025-058 - 7-Zip Multi-byte write heap buffer overflow in NCompress::NRar5::CDecoder
https://notcve.org/view.php?id=CVE-2025-53816
17 Jul 2025 — 7-Zip is a file archiver with a high compression ratio. Zeroes written outside heap buffer in RAR5 handler may lead to memory corruption and denial of service in versions of 7-Zip prior to 25.0.0. Version 25.0.0 contains a fix for the issue. • https://securitylab.github.com/advisories/GHSL-2025-058_7-Zip • CWE-122: Heap-based Buffer Overflow •