Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.
The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux_kernel | Linux | - (including) | - (including) |
| 7zip | Ubuntu | bionic | * |
| 7zip | Ubuntu | lunar | * |
| 7zip | Ubuntu | trusty | * |
| 7zip | Ubuntu | upstream | * |
| 7zip | Ubuntu | xenial | * |