CVE-2018-10115

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a…

published May 2, 2018

CVSS
—
EPSS
5%
Percentile
91.4
In the wild
Unconfirmed
What it is

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04525 · 91.4th percentile
Published
2018-05-02T21:00Z
EPSS history
Timeline
  • 02 MAY 21:00Z
    Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a…
    cvelistv5