CVE-2026-48101 Details
Description
7-Zip is a file archiver with a high compression ratio. Versions 9.21 through 26.00 contain an An uninitialized memory disclosure vulnerability in the UEFI capsule (.scap) parser in 7-Zip. The OpenCapsule function allocates a heap buffer of attacker-declared CapsuleImageSize (up to 1 GiB) without zero-initialization, then reads the file contents into it with ReadStream_FALSE whose return value is silently discarded. If the file is truncated, the unread tail of the buffer retains uninitialized heap memory, which is then exposed as extracted file content via GetStream. Version 26.0.1 fixes the issue.
A vulnerability allowing uninitialized memory disclosure has been identified in the 7-Zip UEFI capsule (.scap) parser. This issue is present in 7-Zip versions 9.21 through 26.00. The vulnerability arises because the OpenCapsule function allocates a heap buffer based on an attacker-defined CapsuleImageSize (up to 1 GiB) without proper initialization. It then reads the file contents into this buffer using ReadStream_FALSE, discarding the return value. If the file is truncated, the buffer retains uninitialized memory, which is subsequently exposed as extracted file content via GetStream.
Users can update to 7-Zip version 26.0.1, which addresses this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://securitylab.github.com/advisories/GHSL-2026-115_GHSL-2026-122_7-zip/ | [email protected] | ExploitPatchThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-908 | Use of Uninitialized Resource | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| 7-zip 7-zip | >= 9.21, < 26.01 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 11, 2026 | Reanalysis | [email protected] |
| Jun 8, 2026 | Initial Analysis | [email protected] |
| Jun 5, 2026 | New CVE Received | [email protected] |