Out-of-Bounds Read in Zziplib

Executive Summary

CVE-2026-111142 is an out-of-bounds read vulnerability in zziplib through version 0.13.80. It occurs in the zzip/mmapped.c file where attackers craft a malicious ZIP central directory with an end-of-central-directory record. This places the first entry near the buffer end, causing zzip_disk_entry_strdup_name to read past allocated memory, leading to heap over-read and potential application crashes.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect systems running zziplib versions up to 0.13.80. Check for crashes or memory corruption when processing ZIP files. Use tools like 'strings' or 'hexdump' on suspicious ZIP files to analyze their structure. Monitor application logs for heap memory over-read errors.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers with local access to cause heap memory over-reads, potentially crashing applications. While it requires user interaction, it could impact confidentiality, integrity, and availability of affected systems by disrupting normal operations.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling unauthorized access to memory contents, which may lead to exposure of sensitive data. GDPR requires protection of personal data, and HIPAA mandates safeguards for protected health information. An out-of-bounds read could allow attackers to access or leak confidential information, violating these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update zziplib to the latest version beyond 0.13.80. If updating is not possible, restrict access to applications using zziplib or disable ZIP file processing. Implement input validation for ZIP files to detect malformed central directories.

Useful 0 Not Useful 0