CVE-2016-2334
High · 7.8CVSS
7.8
EPSS
14.7%
Published
Dec 13, 2016
CISA due date
—
The record
Heap-based buffer overflow in the NArchive::NHfs::CHandler::ExtractZlibFile method in 7zip before 16.00 and p7zip allows remote attackers to execute arbitrary code via a crafted HFS+ image.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | p7zip | 0 | 15.14.1+dfsg-2 |
| Debian:12 | p7zip | 0 | 15.14.1+dfsg-2 |
| Debian:13 | p7zip | 0 | 15.14.1+dfsg-2 |
| Ubuntu:18.04:LTS | p7zip | 0 | 16.02+dfsg-6 |
| openSUSE:Tumbleweed | p7zip | 0 | 16.02-2.1 |
Related vulnerabilities
- CVE-2025-0411 7-Zip Mark-of-the-Web Bypass Vulnerability. Also affects p7zip
- CVE-2024-11612 7-Zip CopyCoder Infinite Loop Denial-of-Service Vulnerability. Also affects p7zip
- CVE-2023-52168 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based… Also affects p7zip
- CVE-2023-52169 The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains an… Also affects p7zip
- CVE-2016-2335 The CInArchive::ReadFileItem method in Archive/Udf/UdfIn.cpp in 7zip 9.20 and 15.05 beta… Also affects p7zip
- CVE-2024-11477 7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. Also affects p7zip
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119