Description
由于7-Zip < 24.07 的版本对用户提供的数据缺乏验证导致在写入内存前发生整数下溢，攻击者可能通过构造包含特制数据或压缩内容的恶意文件并诱使目标用户解压，从而执行任意代码
7-Zip 代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.secrss.com/articles/84044
https://www.cup.edu.cn/nic/wlaq/1908bbad13d748c4800c03c738974043.htm
https://cloud.tencent.com/developer/article/2592951
https://www.zerodayinitiative.com/advisories/ZDI-25-949/
https://blog.qualys.com/product-tech/2025/12/04/active-exploitation-of-7-zip-rce-vulnerability-shows-why-manual-patching-is-no-longer-an-option
https://www.sentinelone.com/vulnerability-database/cve-2025-11001/
https://nvd.nist.gov/vuln/detail/CVE-2025-11001
https://www.threatlocker.com/blog/analysis-of-7-zip-vulnerabilities-cve-2025-11001-and-cve-2025-11002
https://meta.appinn.net/t/topic/63590
https://wlc.czc.edu.cn/info/1011/2121.htm