CVE-2017-12858

Critical

Published: 23/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

Risk Assessment

This vulnerability may lead to unpredictable consequences, including potential remote code execution or system instability.

Recommendation

It is recommended to update the libzip library to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.