CVE-2026-115907

A flaw was found in zip. This vulnerability allows a remote attacker to cause a Denial of Service DoS by submitting a specially crafted ZIP archive. When handling legacy compression formats, the library attempts to allocate output memory based on an unverified, attacker-controlled file size befor...