{"uuid": "3ce02e0a-24c8-432f-8df7-a248956f52cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48095", "type": "seen", "source": "https://bsky.app/profile/securitylab.github.com/post/3mmtzhazu7s27", "content": "Proof of Concept for GHSL-2026-140 (CVE-2026-48095) in 7-Zip <= 26.00. A crafted archive shrinks a 256 MB buffer into 1 byte, overwrites a function pointer with file content, and redirects execution. Full weaponization needs an ASLR bypass. Fixed in 26.01. securitylab.github.com/advisories/G...", "creation_timestamp": "2026-05-27T17:22:18.619806Z"}