CVE-2026-111142: Out-of-bounds Read in gdraheim zziplib
Description
CVE-2026-111142 is an out-of-bounds read vulnerability in gdraheim zziplib versions up to 0.13.80. It occurs in the zzip/mmapped.c component when processing a crafted ZIP central directory, allowing an attacker to cause a heap memory over-read and potentially crash the application. The vulnerability arises from improper handling of the end-of-central-directory record, which can lead to reading past the buffer boundary.
CVSS v4.0
Score 6.8medium
Affected software
gdraheim
zziplib
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in zziplib (up to version 0.13.80) involves an out-of-bounds read in the zzip/mmapped.c file. Specifically, an attacker can craft a ZIP archive with a manipulated end-of-central-directory record that places the first entry near the end of the buffer. This causes the function zzip_disk_entry_strdup_name to read beyond the allocated buffer, resulting in a heap memory over-read and application crash.
Potential Impact
An attacker can cause a denial of service by crashing applications that use vulnerable versions of zziplib when processing malicious ZIP archives. The vulnerability does not indicate privilege escalation or code execution but can lead to application instability or crashes.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch link is provided in the available data. Until a patch is available, avoid processing untrusted ZIP archives with vulnerable versions of zziplib.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-10-15T17:03:57.191Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6ad123b62cdf04f65652b6fd
Added to database: 10/15/2026, 19:04:22 UTC
Last enriched: 10/15/2026, 19:48:42 UTC
Last updated: 10/15/2026, 19:48:42 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.