Post

CryptoCat

@cryptocat.me

cryptocat.melibarchive ZIP Writer Heap Out-of-Bounds Write via Oversized Pathname | CVE-2026-45308 | CryptoCat's BlogRoot cause analysis of CVE-2026-45308 in libarchive, where the ZIP writer copies an oversized entry pathname into a fixed 64 KiB central-directory buffer and writes past the end of it.

30/8/26, 10:58 am·1 repost·1 like