Zurück zur CVE-Übersicht
CVE-2026-55206
NONERisk Signal Score10/100 — NIEDRIG
- Weniger als 24 Stunden alt
EPSS-Score
0%
Exploit-Wahrscheinlichkeit (30 Tage)
Beschreibung
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo._read() in archiveinfo.py used an O(n^2) cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted .7z archive to cause excessive CPU consumption during SevenZipFile.init() before extraction. This issue is fixed in version 1.1.3.
GitHub Advisories
GHSA-h4gh-22qq-72r7MEDIUM
py7zr: O(n^2) algorithmic complexity DoS in PackInfo._read()
pip/py7zr→ 1.1.3
GitHub Advisory