7-Zip Patches Critical RCE Vulnerability in XZ Archive Handling
Photo: BleepingComputer
Quick answer
7-Zip 26.02 patches an RCE vulnerability that allowed attackers to execute arbitrary code via specially crafted XZ archives. The flaw stemmed from a buffer overflow during data decompression.
The 7-Zip development team has released update 26.02, patching a critical remote code execution (RCE) vulnerability. The issue affects the XZ data processing mechanism and could lead to memory buffer overflows during decompression of specially crafted archives.
Security researcher Landon Peng discovered that attackers could exploit the flaw to run arbitrary code on a user's device. Victims only needed to open a malicious archive or visit a spoofed website. The patch includes checks to prevent writing data beyond allocated buffer limits.
7-Zip does not support automatic updates, so users must manually download and install the latest version from the official website. Given the archiver's widespread adoption, such vulnerabilities are attractive targets for cybercriminals. Past flaws have been exploited in phishing campaigns, including by Russian hacker groups.
Experts recommend updating 7-Zip as soon as possible, despite the lack of confirmed attacks leveraging this vulnerability. All users handling archives—especially in corporate environments—are at risk.
Common questions
- How dangerous is the 7-Zip 26.02 vulnerability?
- The flaw enables attackers to execute arbitrary code on a victim's device by exploiting malicious XZ archives. Simply opening the file is sufficient for an attack.
- How can I protect myself from the 7-Zip vulnerability?
- Manually update 7-Zip to version 26.02 by downloading it from the official website. The software does not support automatic updates.
- Has this vulnerability been exploited in real-world attacks?
- No confirmed exploitation cases exist yet, but experts urge immediate updates to mitigate potential risks.
Dzen feed: /feed/dzen.xml · RSS: /feed.xml