file-roller vulnerabilities

CVEs whose affected-version data names the file-roller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-78322Medium· 6.5PoC

2mo ago

File-roller: file-roller: stack buffer overflow in parse_progress_line for 7z and rar handlers

A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive containing a file entry with an excessively long path, file-roller's progress-line parsing copies the path into a fixed-size stack buffer using an …

▾ TwilightRed Hat · file-rollerEPSS 0.51%via CVEORG