[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdx4TVcI1PBgBK9_pR8QNXyjdrmzIhGBZplTSco0J6T0":3,"g5a-risk:CVE-2024-11477":117},{"success":4,"data":5,"meta":114},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":27,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":47,"references":48,"referencesCount":59,"weaknesses":60,"weaknessesCount":47,"isActivelyExploited":69,"cisaInfo":27,"otxData":27,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":105,"notableEvents":106},"CVE-2024-11477","What is CVE-2024-11477?","7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation.\n\nThe specific flaw exists within the implementation of Zstandard decompression. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24346.","7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on ...","2024-11-22T21:15:08.613","2026-06-17T06:57:48.637",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":37,"CVSSMetricV40":38},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","NONE","REQUIRED","UNCHANGED","HIGH",null,1.8,5.9,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":28,"ImpactScore":29},"zdi-disclosures@trendmicro.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",[],[],0.2239,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":44,"version":45,"criteria":46,"vulnerable":4},"7-zip","*","cpe:2.3:a:7-zip:7-zip:*:*:*:*:*:*:*:*",1,[49,55],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fwww.zerodayinitiative.com\u002Fadvisories\u002FZDI-24-1532\u002F","Zerodayinitiative",[53,54],"Third Party Advisory","VDB Entry",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20250214-0007\u002F","Netapp",[],2,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-191","Integer Underflow (Wrap or Wraparound)","The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.","This can happen in signed and unsigned cases.","Draft","Base","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2024-11477? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-11477, a high severity cyber security vulnerability from 2024. 7-Zip Zstandard Decompression Integer Underflow Remote Code...","CVE-2024-11477, CVE-2024-11477 vulnerability, CVE-2024-11477 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, 7-zip security, 7-zip vulnerability","\u002Fwhat-is\u002Fcve-2024-11477",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-11477","Cybersecurity","CVE-2024-11477, CVE-2024-11477 vulnerability, CVE-2024-11477 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":27,"Negate":27,"Nodes":98},[99],{"Operator":100,"Negate":69,"CPEMatch":101},"OR",[102],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":103,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":104,"VersionEndIncluding":27},"01AEC7B4-8443-4267-A0E3-3C41EDFFBB38","24.07",[],[107],{"id":108,"eventType":109,"eventTime":110,"details":111,"label":112,"color":113},"c5e5ba95-8f33-4a4c-8e7f-b57e26407128","LOW_EPSS_DELTA","2026-06-16T04:04:52.355548+00:00","Daily EPSS score decreased by 0.217 on 2024-11-24","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":115,"version":116},1793228661139,"2.0",{"score":118,"band":119,"action":120,"scoredAt":121},53,"Medium","Plan remediation","2026-10-28T07:05:00.651229+00:00"]