PatchSiren

PeaZip CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH PeaZip CVE published 2026-10-01

CVE-2026-102514

CVE-2026-102514 is an out-of-bounds write vulnerability in PeaZip's PEA extractor that allows code execution via a crafted .pea archive. The vulnerability exists in PeaZip versions prior to 11.3.0 and is triggered when a victim opens or extracts a specially crafted .pea archive. This vulnerability has a high CVSS score of 8.4 and is considered a high-severity issue. Users of PeaZip versions prior to 11.3. [truncated]