CVE-2023-31102

HIGH

7-zip < 22.01 - Integer Underflow via Crafted 7Z Archive

Title source: llm

Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

Core 5

Core References

Various Sources

Third Party Advisory

Issue Tracking, Release Notes

Product

Third Party Advisory, VDB Entry

CVSS v3 7.8

EPSS 0.7104

EPSS Percentile 99.3%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

CWE

CWE-191

Status published

Products (3)

7-zip/7-zip < 22.01

netapp/active_iq_unified_manager

netapp/oncommand_workflow_automation

Published Nov 03, 2023

Tracked Since Feb 18, 2026