CVE-2026-125742 | 7-Zip up to 26.05 LZX decoder heap-based overflow

November 10, 2026 Yanac

A vulnerability identified as critical has been detected in 7-Zip up to 26.05. This vulnerability affects unknown code of the component LZX decoder. This manipulation causes heap-based buffer overflow.

This vulnerability is registered as CVE-2026-125742. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More