Vulnerabilities

TI-2026-33170 CVE-2026-45380

bit7z: Path Traversal via Null Byte Injection from `gcount()` Off-by-One in `restoreSymlink()`

MEDIUM 50

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files.

CVSS 3.1LOW 3.6 Local No auth User interaction EPSS 0.00116 Published 2026-06-10 Fixed in 4.0.12 CWE-193

TI-2026-33174 CVE-2026-45384

MEDIUM 60

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files.

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.00125 Published 2026-06-10 Fixed in 4.0.12 CWE-377

TI-2026-21569 CVE-2026-27117

LOW 33

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00368 Published 2026-02-24 Fixed in 4.0.11 CWE-22