CVE-2026-111142

A flaw was found in zziplib. An out-of-bounds read vulnerability allows an attacker to cause a Denial of Service DoS by crashing the application. By supplying a specially crafted ZIP archive with a malformed central directory, an attacker can force the library to read past allocated memory buffer...

CVE-2026-111141

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzipparserootdirectory in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central...

CVE-2026-111142

Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing...

CVE-2026-111141

The zziplib library, versions through 0.13.80 , is vulnerable to an out-of-bounds read in the __zzip_parse_root_directory() function within zzip/zip.c. The flaw stems from an ineffective bounds check in mmap builds , which allows attackers to read past the mapped central directory. By providing a...

CVE-2026-111142

The Zziplib library, versions through 0.13.80 , is susceptible to an out-of-bounds read vulnerability in the zzip/mmapped.c component. An attacker can provide a crafted ZIP central directory where the end-of-central-directory record is manipulated to place the first entry near the buffer end. Thi...

CVE-2026-111141 zziplib through 0.13.80 Out-of-Bounds Read via __zzip_parse_root_directory ZIP64 Parsing

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzipparserootdirectory in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central...

EUVD-2026-102268

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzipparserootdirectory in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central...

CVE-2026-111141

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzipparserootdirectory in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central...

CVE-2026-111142

Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing...

CVE-2026-111142 Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst

Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing...

Astra Linux – Vulnerability in zziplib

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service through the zzipFetchDiskTrailer function located in the /zzip/zip.c file...

Rocky Linux 8 [CIQ] Security Update: zziplib / zziplib-debuginfo / zziplib-debugsource / zziplib-devel / etc (crlsa-2024_3127)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20243127 advisory. zziplib: invalid memory access at zzipdiskentrytofileheader in mmapped.c CVE-2020-18770 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 10.1 [CIQ] Security Update: zziplib / zziplib-debuginfo / zziplib-debugsource / zziplib-devel / etc (crlsa-2025_20478)

The Rocky Linux 10.1 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202520478 advisory. zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c CVE-2018-17828 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: zziplib / zziplib-debuginfo / zziplib-debugsource / zziplib-devel / etc (crlsa-2021_4316)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20214316 advisory. zziplib: infinite loop via the return value of zzipfileread as used in unzzipcatfile CVE-2020-18442 Tenable has extracted the preceding description block directly...

Rocky Linux 8 [CIQ] Security Update: zziplib / zziplib-debuginfo / zziplib-debugsource / zziplib-devel / etc (crlsa-2020_1653)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20201653 advisory. zziplib: directory traversal in unzzipcat in the bins/unzzipcat-mem.c CVE-2018-17828 Tenable has extracted the preceding description block directly from the CIQ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zziplib (UTSA-2023-003111)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003111 advisory. An issue was discovered in function zzipdiskentrytofileheader in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service. Tenable has extracted the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: zziplib (UTSA-2026-090376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090376 advisory. Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value zzipfileread in the function unzzipcatfile. Tenable has...

Azure Linux 3.0 Security Update: zziplib (CVE-2024-39134)

The version of zziplib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39134 advisory. - A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via...

Azure Linux 3.0 Security Update: zziplib (CVE-2024-39133)

The version of zziplib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-39133 advisory. - Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via th...

Azure Linux 3.0 Security Update: zziplib (CVE-2017-5974)

The version of zziplib installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2017-5974 advisory. - Heap-based buffer overflow in the zzipget32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.5...