Opening a crafted XZ archive in 7Zip could let an attacker run code on the machine. The flaw, CVE202614266, is a heapbased buffer overflow in how the archiver processes XZ chunked data, and Trend Micro's Zero Day Initiative ZDI detailed it on July 15. A fix shipped on June 25 in 7Zip 26.02. The overflow lets an attacker "execute code in the context of the current process," per the.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity