low2.5
CVE-2022-47112
7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits.
Impact
7-Zip 22.01 does not report an error for certain invalid xz files, involving stream flags and reserved bits. Some later versions are unaffected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| 7-Zip | 7-Zip | Version 22.01 |