OSV-2026-1127

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzip/OSV-2026-1127.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1127
Published
2026-08-08T00:16:54.217891Z
Modified
2026-08-21T14:16:21.351735Z
Summary
Heap-buffer-overflow in read_data
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447

Crash type: Heap-buffer-overflow READ 1
Crash state:
read_data
_zip_source_call
zip_source_read
References

Affected packages

OSS-Fuzz / libzip

Package

Name
libzip
Purl
pkg:generic/libzip

Affected ranges

Type
GIT
Repo
https://github.com/nih-at/libzip.git
Events
Introduced
385a0c4582f41b3037e6d40747e5da5f8f614f09
Fixed
ff763f0e13d8e1ce37e50bcd7919f38d79c1d437
Fixed
31eefd70f27d33a442466914f5919c84784eafd8

Ecosystem specific 

{
    "severity": "MEDIUM"
}

Database specific

fixed_range 
"492b34755151602cfd40144a8404ee5437b8f757:31eefd70f27d33a442466914f5919c84784eafd8"
introduced_range 
"4cd731076f4a18e3b4b2cc36b4bfb432f571dec5:b5064c161d4677a6147a08551a1f02b00eb813b3"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzip/OSV-2026-1127.yaml"