cve-2003-0282

This is the README file for the 22 May 2004 public release of the Info-ZIP group's portable UnZip zipfile-extraction program and related utilities. unzip551.zip portable UnZip, version 5.51, source code distribution unzip551.tar.Z same as above, but compress'd tar format unzip551.tar.gz same as...

CLEANSTART-2026-HJ66405 Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Info-ZIP UnZip 6...

CLEANSTART-2026-UB42257 Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Heap-based buffer overflow in the getZip64Data function in Info-ZIP UnZip 6...

CLEANSTART-2026-PW81515 Heap-based buffer overflow in the test_compr_eb function in Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Heap-based buffer overflow in the testcompreb function in Info-ZIP UnZip 6...

CLEANSTART-2026-RT55512 Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Heap-based buffer overflow in the CRC32 verification in Info-ZIP UnZip 6...

CLEANSTART-2026-QO65180 Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Info-ZIP UnZip 6...

CLEANSTART-2026-BT52726 Info-ZIP UnZip 6

Security vulnerability affects the unzip package. Info-ZIP UnZip 6...

MGASA-2026-0406 Updated zip packages fix a security vulnerability

zip test option -T command injection. Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service invalid free and application crash or possibly have unspecified other impact because of an off-by-one error. CVE-2018-13410...

MGASA-2026-0405 Updated unzip packages fix security vulnerabilities

Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed...

Updated unzip packages fix security vulnerabilities

Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed...

Updated zip packages fix a security vulnerability

zip test option -T command injection. Info-ZIP Zip 3.0, when the -T and -TT command-line options are used, allows attackers to cause a denial of service invalid free and application crash or possibly have unspecified other impact because of an off-by-one error. CVE-2018-13410...

PT-2026-98208

Vulnerabilities were discovered in the Info-ZIP unzip program, which could result in the execution of arbitrary code if a specially crafted file is processed...

CVE-2026-87794

bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...

EUVD-2026-74790

bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...

CVE-2026-87794

bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...

CVE-2026-87794 bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination

bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...

CVE-2026-87794

bestzip (Node.js package node-bestzip) versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function. Attackers can inject arbitrary arguments to the Info-ZIP backend by supplying a malicious destination path combined with crafted source entries, leading to arbitr...

CVE-2026-87794 bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination

bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source entries to execute arbitrary commands...

PT-2026-88916

Name of the Vulnerable Software and Affected Versions bestzip version 2.2.6 bestzip version 3.0.2 Description An argument injection issue exists in the nativeZip function, allowing attackers to inject arbitrary arguments into the Info-ZIP backend. By providing a malicious destination path and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: unzip (UTSA-2025-002255)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002255 advisory. Info-ZIP UnZip 6.0 has a buffer overflow in list.c, when a ZIP archive has a crafted relationship between the compressed-size value and the uncompressed-size value,...