Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability

Summary

Technical analysis of CVE-2024-11477, an out-of-bounds read in 7-Zip's ZSTD decompression that stems from missing bounds checks on literals/match length codes and can escalate into a heap overflow.
Published
Collected

original ↗

Related coverage

back