High severity7.8NVD Advisory· Published May 2, 2018· Updated Jun 17, 2026

CVE-2018-10115

Description

Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7 Zip/7 Zip2 versions
cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*range: <=18.03
- (no CPE)range: <=18.03

Patches

Vulnerability mechanics

References

landave.io/2018/05/7-zip-from-uninitialized-memory-to-remote-code-execution/nvdExploitThird Party Advisory
www.securityfocus.com/bid/104132nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040832nvdThird Party AdvisoryVDB Entry
sourceforge.net/p/sevenzip/discussion/45797/thread/adc65bfa/nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000