Gdraheim Zziplib vulnerabilities

CVE-2017-5981 [MEDIUM] CWE-617 CVE-2017-5981: seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure a seeko.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (assertion failure and crash) via a crafted ZIP file.

CVE-2017-5980 [MEDIUM] CWE-476 CVE-2017-5980: The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a d The zzip_mem_entry_new function in memdisk.c in zziplib 0.13.62 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP file.

CVE-2026-111141 [MEDIUM] CWE-125 CVE-2026-111141: zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory( zziplib through 0.13.80 contains an out-of-bounds read vulnerability in __zzip_parse_root_directory() in zzip/zip.c that allows attackers to read past the mapped central directory in mmap builds due to an ineffective bounds check. Attackers can supply a crafted ZIP whose entry name ends at the central directory end, triggering 28-byte ZIP64 extra

CVE-2024-39133 [MEDIUM] CVE-2024-39133: Heap Buffer Overflow vulnerability in zziplib v0 Heap Buffer Overflow vulnerability in zziplib v0.13.77 allows attackers to cause a denial of service via the __zzip_parse_root_directory() function at /zzip/zip.c.

CVE-2020-18770 [MEDIUM] CWE-400 CVE-2020-18770: An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, An issue was discovered in function zzip_disk_entry_to_file_header in mmapped.c in zziplib 0.13.69, which will lead to a denial-of-service.

CVE-2020-18442 [LOW] CWE-835 CVE-2020-18442: Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the retur Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value "zzip_file_read" in the function "unzzip_cat_file".