https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-19T23:38:25.939058+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-111274 CVE-2026-111274 — unarr through 1.1.1 Heap Out-of-Bounds Read via zip_parse_extra_fields 2026-10-19T23:38:25.939845+00:00

Affected: selmf unarr

unarr through 1.1.1 contains a heap-based out-of-bounds read in zip_parse_extra_fields() in zip/parse-zip.c due to an incorrect ZIP64 extra field length check. Attackers can supply a crafted ZIP archive with 0xFFFFFFFF sentinel values and a truncated ZIP64 record to read past the heap buffer and crash the process.