CVE-2026-48092

Name of the Vulnerable Software and Affected Versions 7-Zip versions 9.34 through 26.00

Description A heap memory disclosure exists in 32-bit builds where a 32-bit integer overflow occurs in the SquashFS ReadBlock() function. This allows an attacker-controlled node.Offset value to bypass fragment bounds checks, causing memcpy to read heap memory preceding the cache buffer into the extracted file. This occurs because the addition of offsetInBlock and blockSize can wrap modulo 2³² when size t is 32 bits. 64-bit builds are not affected as the addition is promoted to 64 bits, ensuring the check correctly rejects the input.

Recommendations Update to version 26.01.