Kcybersecurity·CybersecuritybyKid 7-Zip Zero-Day Exploit Allegedly Leaked Onlinehttps://cybersecuritynews.com/7-zip-zero-day-exploit/Open linkView original on sh.itjust.works48Comments3Reply
tthemelm sh.itjust.works2Hide 2 repliesThe dev appears to think this is a fake exploit generated by LLM/AI https://sourceforge.net/p/sevenzip/bugs/2539/24Reply
wizardbeard replylemmy.dbzer0.com1Hide 1 replyBased off a small technicality with one of the comments in the code. The "function" referenced is actually a macro.7Reply
HHackerJoe replysh.itjust.worksIt's nonsense: https://xcancel.com/Seifreed/status/1874245336291488179 The LZMA implementation already validates bounds elsewhere (bufLimit). If p->buf exceeds its limit, the program aborts the decompression safely. 🚫 The claim of unchecked memory access is baseless. 4Reply
3 replies
The dev appears to think this is a fake exploit generated by LLM/AI
https://sourceforge.net/p/sevenzip/bugs/2539/
Based off a small technicality with one of the comments in the code. The "function" referenced is actually a macro.
It's nonsense:
https://xcancel.com/Seifreed/status/1874245336291488179