It isn't that mysterious.
p7zip has a number of known bugs easily found by fuzzing, as it hasn't seen updates for years. 7-zip in general is a tool that is written in C and supports lots of complex binary formats and thus has a huge attack surface for memory corruption bugs.
This is all pretty obvious with some basic knowledge of how these things work.