GHSA-PX8P-9VWX-VF98 fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

fflate unzipSync can enter an infinite loop when parsing malformed ZIP64 archives

fflate through 0.8.2 is vulnerable to denial of service via an infinite loop in unzipSync. A crafted ZIP archive with a central directory entry declaring compressedsize=0xFFFFFFFF ZIP64 sentinel but missing the required ZIP64 extra field tag 0x0001 causes z64e to loop indefinitely due to...

jsign:AuthenticodeAppxSignerFuzzer: Security exception in net.jsign.appx.Zip64EndOfCentralDirectoryRecord.read

Project: https://github.com/ebourg/jsign.git Detailed Report: https://oss-fuzz.com/testcase?key=6359562199105536 Project: jsign Fuzzing Engine: libFuzzer Fuzz Target: AuthenticodeAppxSignerFuzzer Job Type: libfuzzerasanjsign Platform Id: linux Crash Type: Security exception Crash Address: Crash...