{"action":"Upgrade p7zip-rar to 16.02-3 or later.","affected":[{"fixed":"16.02-3","introduced":"0"}],"component":"p7zip-rar","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["16.02-3"],"id":"tcs_01M5NCVSV4APDAT7T2AYH8YFS6","modified_at":"2026-10-23T18:03:22.889079860Z","published_at":"2018-05-02T21:29:00.260Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2018-10115","https://security-tracker.debian.org/tracker/CVE-2018-10115"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2018-10115","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2018-10115"}],"summary":"Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) o"}