Aikido Intel
Secure My Code
Intel

AIKIDO-2026-916324

7-zip-zstd is vulnerable to Out-of-bounds Write

CVE-2026-111497Published 3 days ago
November 6, 2026

98

CVE Score

Critical

Out-of-bounds Write

Are you affected? Scan for Free

TL;DR

7-zip-zstd bundles Google's Brotli decoder and uses it when opening Brotli-compressed archives or .br files. A block type switch in a stream that declares only one block type is ignored on the fast path, so decoding continues and writes outside the decoder output buffer. Opening a crafted archive can crash the process, disclose memory, corrupt data, or potentially execute arbitrary code. The patched build vendors a decoder that reports the invalid block switch and stops.

How do I fix this?

Upgrade the 7-zip-zstd library to the patch version.

Who does this affect?

You are affected if you are using a version that falls within the vulnerable range and you open Brotli-compressed archives or .br files.

Package

7-zip-zstd

Versions

18.05-v1.3.6-R1 - 26.02-v1.5.7-R2

Fixed in 26.05-v1.5.7-R1

Background info

7-zip-zstd is vulnerable to Out-of-bounds Write in versions 18.05-v1.3.6-R1 - 26.02-v1.5.7-R2.

Links

Other

nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
https://nodejs.org/en/blog/vulnerability/october-2026-security-releases#nodejs-brotli-decoder-out-of-bounds-write-permits-remote-code-execution-cve-2026-111497---high
openwall.com/lists/oss-security/2026/10/23/25
http://www.openwall.com/lists/oss-security/2026/10/23/25
openwall.com/lists/oss-security/2026/10/24/6
http://www.openwall.com/lists/oss-security/2026/10/24/6
openwall.com/lists/oss-security/2026/10/26/12
http://www.openwall.com/lists/oss-security/2026/10/26/12
openwall.com/lists/oss-security/2026/10/26/13
http://www.openwall.com/lists/oss-security/2026/10/26/13
openwall.com/lists/oss-security/2026/10/26/16
http://www.openwall.com/lists/oss-security/2026/10/26/16
openwall.com/lists/oss-security/2026/11/03/2
http://www.openwall.com/lists/oss-security/2026/11/03/2
broccoli2shell.com
https://broccoli2shell.com
lists.debian.org/debian-lts-announce/2026/10/msg00049.html
https://lists.debian.org/debian-lts-announce/2026/10/msg00049.html
patchtheplanet.org/brotli
https://patchtheplanet.org/brotli
aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497
https://www.aikido.dev/blog/node2shell-nodejs-brotli-rce-cve-2026-111497
cert-portal.siemens.com/productcert/html/ssa-045512.html
https://cert-portal.siemens.com/productcert/html/ssa-045512.html
cert-portal.siemens.com/productcert/html/ssa-443410.html
https://cert-portal.siemens.com/productcert/html/ssa-443410.html
cert-portal.siemens.com/productcert/html/ssa-898633.html
https://cert-portal.siemens.com/productcert/html/ssa-898633.html
ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/
https://ellio.tech/en/blog/node2shell-cve-2026-111497-rce-on-stock-nodejs-builds/
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-111497

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.

Start for Free Book a Demo

No credit card required | Scan results in 32 seconds.

Trusted by 150k+ orgs
  • Revolut
  • n8n
  • Lovable
  • Deel
  • Prove
  • Omnea
Subscribe
Stay up to date with all updates

I consent to receiving marketing communications based on Aikido’s Privacy Policy.

LinkedIn YouTube X
© 2026 Aikido Security BV | BE0792914919
Keizer Karelstraat 15, 9000, Ghent, Belgium
95 Third St, 2nd Fl, San Francisco, CA 94103, US
Unit 6.15 Runway East 18 18 Crucifix Ln, London SE1 3JW UK
SOC 2SOC 2Compliant
ISO 27001ISO 27001Compliant
ISO 42001ISO 42001Compliant
FedRAMPFedRAMPAuthorized

© All Intel data is openly available and commercially licensed.