Skip to content
Fencer Vulns
high 7.8

CVE-2023-40481 in the critical feed json

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

published 2024-05-03 2 y ago modified 2026-06-17 4 mo ago also EUVD-2023-45052

cvss
7.8
version 3.0, CNA
cisa kev
Not listed
not in CISA's catalog
epss
13.8%
EPSS 13.8% chance of exploitation in 30 days, percentile 96%
public exploits
0
none known

Summary

7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the parsing of SQFS files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-18589.

Patch / fix

  • 7-zip 7-zip 23.00
  • 7zip Debian 12 22.01+really25.01+dfsg-0+deb12u1
  • 7zip Debian 14, Debian 13 23.01+dfsg-1
  • p7zip Debian 12 16.02+really25.01+dfsg-0+deb12u1
  • p7zip Debian 13 16.02+transitional.1

debian advisories DEBIAN-CVE-2023-40481

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-40481 updated cvss 7.8

p7zip: SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

  • Red Hat All currently supported Red Hat products
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

cisa ICSA-24-256-20 updated cvss 7.8

Rockwell Automation AADvance Trusted SIS Workstation

  • Rockwell Automation AADvance Trusted SIS Workstation <=2.00.01
    affected: fixed in 2.00.02, mitigation “Rockwell Automation offers users the following solutions:” rockwellautomation.custhelp.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

13.84% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

  • 7-Zip 7-Zip

Classification

Weakness

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.