Threats tagged 'ghsa-rj75-52m6-37p5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2026-111274unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an Medium6.82026-10-16GCVE DatabaseCVE-2026-111274 A heap-based out-of-bounds read vulnerability exists in unarr through version 1.1.1 within the zip_parse_extra_fields() function due to an incorrect ZIP64 extra field length check. This flaw allows an attacker to craft a malicious ZIP archive with specific sentinel values and a truncated ZIP64 record, causing the process to read beyond the heap buffer and potentially crash. Report on CVE-2026-111274 Vulnerability CWE-125 #ghsa-rj75-52m6-37p5	GCVE Database	2026-10-16

Page 1 of 1