Product
7-Zip versions prior to 26.06 contain a heap out-of-bounds write vulnerability in the LZX decoder that can lead to arbitrary code execution when processing crafted multi-volume CAB archives.