{"id":11457,"date":"2025-07-22T12:30:54","date_gmt":"2025-07-22T05:30:54","guid":{"rendered":"https:\/\/infosec.new88088.net\/?p=11457"},"modified":"2026-06-25T09:59:50","modified_gmt":"2026-06-25T02:59:50","slug":"new-7-zip-vulnerability-can-cause-application-to-crash-when-extracting-malicious-rar5-files","status":"publish","type":"post","link":"https:\/\/infosec.new88088.net\/en\/2025\/07\/22\/new-7-zip-vulnerability-can-cause-application-to-crash-when-extracting-malicious-rar5-files\/","title":{"rendered":"New 7-Zip vulnerability can cause application to ” crash ” when extracting malicious RAR5 files"},"content":{"rendered":"
A vulnerability was recently discovered in the popular decompression software 7-Zip, which could cause the application to collapse completely when processing a maliciously edited RAR5 file. While this does not allow hackers to gain control of the machine, it is sufficient to create a Do Not Service (DoS) situation, causing the software or system to be disrupted, suspended, or paralyzed.<\/b>
\n\u200b<\/div>\n
\"1753171211998.png\"<\/a>\u200b<\/div>\n
\n

The bug was officially patched in version 7 – Zip 25.00, released on July 5, 2025.<\/p>\n

The vulnerability is in the RAR5 compression format processor, a common compression standard. When you run into a corrupted archive, 7-Zip tries to “cure” it by filling in a “0” to replace the error. But due to the miscalculation of the memory size required, the software overruled beyond the allowed memory range, resulting in “memory leak” and application crash.<\/p>\n

This phenomenon is known as heap buffer overflow, where software writes data beyond the allocated memory limit, leading to uncontrolled behavior and even crashes.<\/p>\n

This error does not help hackers control the machine but is extremely dangerous if you accidentally unzip a malicious RAR5 file:<\/p>\n<\/div>\n