Priority HIGH 72
A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00604 · Published 2024-06-27 · Will not fix CWE-120
Priority MEDIUM 59
zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bou…
CVSS 4.0MEDIUM 5.7· Local · No auth · User interaction · EPSS 0.00121 · Published 2026-10-15 · Fix deferred CWE-125
Priority MEDIUM 58
An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00344 · Published 2023-08-22 · Partial fix CWE-400
Priority LOW 34
In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the __zzip_parse_root_directory function of zzip/zip.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02801 · Published 2018-02-09 · Will not fix CWE-770
Priority LOW 33
An issue was discovered in ZZIPlib through 0.13.69.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01945 · Published 2018-09-05 · Fixed CWE-772
Priority LOW 33
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address (when handling disk64_trailer local entries) in __zzip_fetch_disk_trailer (zzip/zip.c).
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02262 · Published 2018-02-02 · Fixed
Priority LOW 33
In ZZIPlib 0.13.67, there is a bus error caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02262 · Published 2018-02-02 · Will not fix
Priority LOW 33
In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02242 · Published 2018-02-01 · Will not fix
Priority LOW 32
An issue was discovered in ZZIPlib 0.13.68.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0169 · Published 2018-03-06 · Fixed CWE-119
Priority LOW 32
An issue was discovered in ZZIPlib 0.13.68.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0169 · Published 2018-03-06 · Fixed CWE-119
Priority LOW 32
In ZZIPlib 0.13.67, 0.13.66, 0.13.65, 0.13.64, 0.13.63, 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57 and 0.13.56 there is a segmentation fault caused by invalid memory access in the zzip_disk_fread function (zzip…
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01698 · Published 2018-01-29 · Will not fix CWE-119
Priority LOW 31
An issue was discovered in ZZIPlib 0.13.68.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01244 · Published 2018-03-06 · Fixed CWE-772
Priority LOW 31
In ZZIPlib 0.13.67, there is a bus error (when handling a disk64_trailer seek value) caused by loading of a misaligned address in the zzip_disk_findfirst function of zzip/mmapped.c.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0122 · Published 2018-02-02 · No fix listed
Priority LOW 29
Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00128 · Published 2026-10-15 · Fix deferred CWE-125
Priority LOW 29
Heap-based buffer overflow in the zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02033 · Published 2017-03-01 · Will not fix CWE-787
Priority LOW 29
Heap-based buffer overflow in the __zzip_get64 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP f…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02078 · Published 2017-03-01 · Will not fix CWE-787
Priority LOW 29
Heap-based buffer overflow in the __zzip_get32 function in fetch.c in zziplib 0.13.62, 0.13.61, 0.13.60, 0.13.59, 0.13.58, 0.13.57, 0.13.56 allows remote attackers to cause a denial of service (crash) via a crafted ZIP f…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01847 · Published 2017-03-01 · Will not fix CWE-119
Priority LOW 28
Directory traversal vulnerability in ZZIPlib 0.13.69 allows attackers to overwrite arbitrary files via a ..
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01538 · Published 2018-10-01 · Fixed CWE-22
Priority LOW 28
seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01616 · Published 2017-03-01 · Will not fix CWE-617
Priority LOW 28
The prescan_entry function in fseeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01616 · Published 2017-03-01 · Will not fix CWE-476
Priority LOW 28
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted ZIP file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01616 · Published 2017-03-01 · Will not fix CWE-125
Priority LOW 28
The zzip_mem_entry_extra_block function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (invalid memory read and crash) via a crafted ZIP file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01727 · Published 2017-03-01 · Will not fix CWE-125
Priority LOW 27
The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.
CVSS 3.0MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.01284 · Published 2017-03-01 · Will not fix CWE-476
Priority LOW 17
Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00745 · Published 2021-06-18 · Fixed CWE-835