Mercredi 22 juillet 2026
1 CVE sur 9
Critique 2
Élevée 2
Moyenne 4
Faible 1
Non évaluée 0
Exploitées (KEV)
Tri : plus récentes
« Linux » ✕
-
CVE-2026-16517 2.9 Faible
Red Hat Enterprise Linux 10 · Red Hat Hardened Images · Red Hat Enterprise Linux 6 · Red Hat Enterprise Linux 7
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.