---
id: 3041
title: "CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability"
cve: CVE-2024-11477
source_domain: crowdfense.com
source_url: "https://www.crowdfense.com/cve-2024-11477-7zip-zstd-buffer-overflow/"
published_at: "2025-05-08 15:11"
tags: ["vulnerability-analysis", "buffer-overflow", "out-of-bounds", "cve-2024-11477", "7-zip", "zstd", "decompression"]
phying_url: "https://phying.com/item/3041"
lang: en
---

# CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability

## Summary

Technical analysis of CVE-2024-11477, an out-of-bounds read in 7-Zip's ZSTD decompression that stems from missing bounds checks on literals/match length codes and can escalate into a heap overflow.

## Intelligence Metadata

- **Sources:** crowdfense.com
- **CVE:** CVE-2024-11477
- **Published:** 2025-05-08 15:11
- **Original:** https://www.crowdfense.com/cve-2024-11477-7zip-zstd-buffer-overflow/
- **Phying News:** https://phying.com/item/3041