Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 24

Export CSV
CVE-2026-111142

Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst

Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing zzip_disk_entry_strdup_name to read past the buffer and crash the application.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2026-111141

zziplib through 0.13.80 Out-of-Bounds Read via __zzip_parse_root_directory ZIP64 Parsing

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central directory end, triggering 28-byte ZIP64 extra field over-reads via zzip_dir_open() that crash the process.

CVSS 4.0 · 5.7 Medium EPSS < 1% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2018-17828

zziplib: directory traversal in unzzip_cat in the bins/unzzipcat-mem.c

Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a .. (dot dot) in a zip file, because of the function unzzip_cat in the bins/unzzipcat-mem.c file.

CVSS 3.0 · 5.5 Medium EPSS 1.5% KEV · Not listed
Vendors
Gdraheim Redhat
Products
Zziplib Enterprise Linux
CVE-2017-5976

zziplib: heap-based buffer overflow in zzip_mem_entry_extra_block (memdisk.c)

Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP file.

CVSS 3.1 · 5.5 Medium EPSS 2.0% KEV · Not listed
Vendors
Debian Gdraheim
Products
Debian Linux Zziplib
CVE-2017-5977

zziplib: invalid memory read in zzip_mem_entry_extra_block (memdisk.c)

The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2017-5978

zziplib: out of bounds read in zzip_mem_entry_new (memdisk.c)

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2017-5979

zziplib: NULL pointer dereference in prescan_entry (fseeko.c)

The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2017-5980

zziplib: NULL pointer dereference in zzip_mem_entry_new (memdisk.c)

The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2018-16548

zziplib: Memory leak triggered in the function __zzip_parse_root_directory in zip.c

An issue was discovered in ZZIPlib through 0.13.69. There is a memory leak triggered in the function __zzip_parse_root_directory in zip.c, which will lead to a denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.9% KEV · Not listed
Vendors
Gdraheim Redhat
Products
Zziplib Enterprise Linux
CVE-2018-6381

zziplib: Invalid memory access in the zzip_disk_fread function in zzip/mmapped.c

In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip/mmapped.c) because the size variable is not validated against the amount of file->stored data.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Gdraheim
Products
Ubuntu Linux Zziplib
CVE-2018-6484

zziplib: Loading of misaligned memory address in zip.c:__zzip_fetch_disk_trailer can lead to a denial of service via crafted zip file

In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

CVSS 3.0 · 6.5 Medium EPSS 2.2% KEV · Not listed
Vendors
Canonical Gdraheim
Products
Ubuntu Linux Zziplib
CVE-2017-5981

zziplib: assertion failure in seeko.c

seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.

CVSS 3.0 · 5.5 Medium EPSS 1.6% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2018-6541

zziplib: Bus error caused by loading of a misaligned address inzzip/zip.c

In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

CVSS 3.0 · 6.5 Medium EPSS 2.3% KEV · Not listed
Vendors
Canonical Gdraheim Redhat
Products
Ubuntu Linux Zziplib Enterprise Linux
CVE-2018-6542

zziplib: bus error in zzip_disk_findfirst function in zzip/mmapped.c

In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gdraheim
Products
Zziplib
CVE-2018-6869

zziplib: uncontrolled memory allocation in __zzip_parse_root_directory in zzip/zip.c

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

CVSS 3.0 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Canonical Debian Gdraheim
Products
Ubuntu Linux Debian Linux Zziplib
CVE-2018-7725

zziplib: out of bound read in mmapped.c:zzip_disk_fread() causes crash

An issue was discovered in ZZIPlib 0.13.68. An invalid memory address dereference was discovered in zzip_disk_fread in mmapped.c. The vulnerability causes an application crash, which leads to denial of service.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Gdraheim Redhat
Products
Ubuntu Linux Zziplib Enterprise Linux and 3 more
CVE-2018-7726

zziplib: Bus error in zip.c:__zzip_parse_root_directory() cause crash via crafted zip file

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the __zzip_parse_root_directory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.

CVSS 3.0 · 6.5 Medium EPSS 1.7% KEV · Not listed
Vendors
Canonical Gdraheim Redhat
Products
Ubuntu Linux Zziplib Enterprise Linux and 3 more
CVE-2018-7727

zziplib: Memory leak in memdisk.c:zzip_mem_disk_new() can lead to denial of service via crafted zip

An issue was discovered in ZZIPlib 0.13.68. There is a memory leak triggered in the function zzip_mem_disk_new in memdisk.c, which will lead to a denial of service attack.

CVSS 3.0 · 6.5 Medium EPSS 1.2% KEV · Not listed
Vendors
Gdraheim Redhat
Products
Zziplib Enterprise Linux Enterprise Linux Desktop and 2 more
CVE-2020-18442

zziplib: infinite loop via the return value of zzip_file_read() as used in unzzip_cat_file()

Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".

CVSS 3.1 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Gdraheim and 1 more
Products
Debian Linux Fedora Zziplib and 1 more
CVE-2020-18770

zziplib: invalid memory access at zzip_disk_entry_to_file_header in mmapped.c

An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Gdraheim Redhat
Products
Zziplib Enterprise Linux