CVE-2026-111142
Zziplib through 0.13.80 Out-of-Bounds Read via zzip_disk_findfirst
gdraheim zziplib
CVSS
6.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.13%Chance of exploitation activity in the next 30 days, higher than 2% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
Zziplib through 0.13.80 contains an out-of-bounds read vulnerability in zzip/mmapped.c that allows attackers to over-read heap memory via a crafted ZIP central directory. Attackers can craft an end-of-central-directory record placing the first entry near the buffer end, causing zzip_disk_entry_strdup_name to read past the buffer and crash the application.
Text from CVE List
Affected versions 1
- zziplibaffected: all versions through 0.13.80CVE List
References 5
- vulncheck.com/advisories/zziplib-through-0.13.80-out-of-bounds-read-via-zzip-disk-findfirstAdvisoryvia CVE List
- hackmd.io/@haind-pwn/zziplib-zip-central-directory-oob-readReferencevia CVE List
- github.com/gdraheim/zziplib/blob/f58313c1f65f46bf73f3526d1afd4d6bb46cc4ae/zzip/mmapped.c#L420-L497Referencevia CVE List
- github.com/gdraheim/zziplib/blob/f58313c1f65f46bf73f3526d1afd4d6bb46cc4ae/zzip/mmapped.c#L323-L352Referencevia CVE List
- github.com/gdraheim/zziplibReferencevia CVE List