7-Zip XZ Decompression Heap-Based Buffer Overflow RCE Vulnerability

A vulnerability has been discovered in 7-Zip's XZ decompression, allowing for a heap-based buffer overflow that can lead to remote code execution. The issue has been reported and an advisory has been published by the Zero Day Initiative. The vulnerability is discussed on a comments thread with a single comment. The advisory and discussion can be found at the provided URLs.