CVE-2026-16517
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk0th percentile - higher than 0% of all known CVEs
Summary
Signed integer overflow vulnerability in libarchive's ZIP writer in archive_write_zip_header. When ZIP encryption is enabled and file size is near INT64_MAX, adding encryption overhead overflows int64_t, causing undefined behavior, potentially incorrect Zip64 decisions or memory corruption.
Risk Assessment
Risk includes potential memory corruption or incorrect ZIP archive creation, leading to data loss or instability in applications using libarchive.
Recommendation
Update libarchive to a patched version (e.g., 3.7.7 or later) and avoid ZIP encryption for very large files.
Original NVD description (English source)
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.