GitHub Security Lab on Mythryl: “Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <=…”

@securitylab.github.com

Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. securitylab.github.com/advisories/G...

27/5/26, 5:22 pm2 reposts0 likes

Post