CVE-2016-9296

A null pointer dereference bug affects the 16.02 and many old versions of p7zip

published November 12, 2016

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07016 · 94.1th percentile
Published
2016-11-12T02:19Z
EPSS history
Timeline
  • 12 NOV 02:19Z
    A null pointer dereference bug affects the 16.02 and many old versions of p7zip
    cvelistv5