Debian/p7zip: medium 6.5
7-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BSD SYMDEF parser. A 4-byte heap out-of-bounds read exists in
Action: Upgrade p7zip to 16.02+really26.01+dfsg-0+deb12u1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 16.02+really26.01+dfsg-0+deb12u1 | - |
Fixed versions
| 16.02+really26.01+dfsg-0+deb12u1 |
Sources
- osv: DEBIAN-CVE-2026-48112#Debian:12/p7zip
- https://security-tracker.debian.org/tracker/CVE-2026-48112
published · modified · JSON