Search: CVE-2025-8291

CVE-2025-8291 is a medium severity vulnerability in the Python Software Foundation's CPython implementation affecting the 'zipfile' module. The issue arises because the module does not properly validate the offset value in the ZIP64 End of Central Directory (EOCD) Locator record and assumes the ZIP64 EOCD record is the previous record in the archive. This discrepancy can cause the 'zipfile' module to handle certain ZIP archives differently than other ZIP implementations. The remediation maintains the original behavior but adds a check to ensure the offset specified in the ZIP64 EOCD Locator record matches the expected value.