Memory Corruption Vulnerability in 7-Zip by RAR5 Handler

CVE-2025-53816

What is CVE-2025-53816?

7-Zip, a widely used file archiver known for its efficient compression capabilities, has a vulnerability in its RAR5 handler. In affected versions prior to 25.0.0, the software improperly manages memory by writing zero values outside the designated heap buffer. This flaw could lead to memory corruption, which may result in unexpected behavior or denial of service. Users are strongly encouraged to upgrade to version 25.0.0 or later, where this issue has been addressed, to ensure the security and stability of their file archiving processes.

References