CVE-2023-52168: 7-Zip 7zip

High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The NtfsHandler.cpp NTFS handler in 7-Zip before 24.01 (for 7zz) contains a heap-based buffer overflow that allows an attacker to overwrite two bytes at multiple offsets beyond the allocated buffer size: buffer+512*i-2, for i=9, i=10, i=11, etc.

Affected products

• 7-Zip 7zip: before 24.01 (fixed in 24.01)

Published 2024-07-03. Last modified 2026-06-17.