Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/p7zip@16.02%2Bdfsg-2?distro=trixie
purl pkg:deb/debian/p7zip@16.02%2Bdfsg-2?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-j4uh-y3j4-5kdw A null pointer dereference bug affects the 16.02 and many old versions of p7zip. A lack of null pointer check for the variable folders.PackPositions in function CInArchive::ReadAndDecodePackedStreams in CPP/7zip/Archive/7z/7zIn.cpp, as used in the 7z.so library and in 7z applications, will cause a crash and a denial of service when decoding malformed 7z files. CVE-2016-9296

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:16:09.536485+00:00 Debian Importer Fixing VCID-j4uh-y3j4-5kdw https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:23:27.524875+00:00 Debian Importer Fixing VCID-j4uh-y3j4-5kdw https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:49:16.814507+00:00 Debian Importer Fixing VCID-j4uh-y3j4-5kdw https://security-tracker.debian.org/tracker/data/json 38.1.0