Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-10-15T18:57:33 zziplib: zziplib: Denial of Service via out-of-bounds read in central directory parsing 4.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H CWE-125

zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central directory end, triggering 28-byte ZIP64 extra field over-reads via zzip_dir_open() that crash the process.

A flaw was found in zziplib. An attacker could exploit this vulnerability by providing a specially crafted ZIP archive to an application utilizing the library. An ineffective bounds check during the parsing of the central directory causes the library to read past allocated memory, resulting in an application crash and Denial of Service (DoS).

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Enterprise Linux 10 Fix deferred zziplib Red Hat Enterprise Linux 7 Fix deferred zziplib Red Hat Enterprise Linux 8 Fix deferred zziplib Red Hat Enterprise Linux 9 Fix deferred zziplib https://www.cve.org/CVERecord?id=CVE-2026-111141 https://nvd.nist.gov/vuln/detail/CVE-2026-111141 https://github.com/gdraheim/zziplib https://github.com/gdraheim/zziplib/blob/f58313c1f65f46bf73f3526d1afd4d6bb46cc4ae/zzip/zip.c#L530-L558 https://hackmd.io/@haind-pwn/zziplib-zip-central-directory-oob-read https://www.vulncheck.com/advisories/zziplib-through-0.13.80-out-of-bounds-read-via-zzip-parse-root-directory-zip64-parsing