« List of all CVEs

CVE-2016-4300

Published: 9/21/2016 Last updated: 8/6/2024 Reserved: 4/27/2016

Integer overflow in the read_SubStreamsInfo function in archive_read_support_format_7zip.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a 7zip file with a large number of substreams, which triggers a heap-based buffer overflow.

CNA assigner: certcc (37e5125f-f79b-445b-8fad-9564f167944b) Requested by: n/a

Opam packages affected (1)

conf-cpio

Products affected (1)

Product Vendor Version
n/a n/a Android 12.0

References (24)