CVE-2025-55188

概要

参考情報

• ip7z/7zip · Product
• ip7z/7zip release 25.01 · Release Notes
• lunbun/CVE-2025-55188 · Exploit
• lunbun.dev/blog/cve-2025-55188 · Exploit
• sourceforge.net/p/sevenzip/discussion/45797/thread/da14cd780b · Product
• openwall.com/lists/oss-security/2025/08/09/1 · Mailing List
• vicarius.io/vsociety/posts/cve-2025-55188-detect-7-zip-vulnerable-version
• vicarius.io/vsociety/posts/cve-2025-55188-mitigate-7-zip-vulnerability
• youtu.be/sWT6M1cfnwM · Exploit
• openwall.com/lists/oss-security/2025/08/09/1
• openwall.com/lists/oss-security/2025/08/10/1
• openwall.com/lists/oss-security/2025/08/13/1
• openwall.com/lists/oss-security/2025/10/12/2
• openwall.com/lists/oss-security/2025/10/16/7

7-zip のその他の脆弱性

• CVE-2026-14266高 7.87-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute…
• CVE-2026-58052低 3.37-Zip for Windows through 26.01 fails to preserve the Mark-of-the-Web when extracting a crafted RAR5 archive, because its guard that suppres…
• CVE-2026-48112中 6.57-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain a heap out-of-bounds read in 7-Zip Ar handler BS…
• CVE-2026-48111高 7.17-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an off-by-one out-of-bounds read vulnerability i…
• CVE-2026-48104中 4.27-Zip is a file archiver with a high compression ratio. Versions 9.18 through 26.00 contain an uninitialized heap read in the SquashFS archi…