CVE Explorer

CVE-2026-39244

adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103, Buffer.alloc(_centralHeader.size) allocates memory based on the declared uncompressed size from the ZIP central directory header without validating it against the actual compressed data size or imposing any upper bound. The size value is read directly from the binary header at entryHeader.js line 266 with no bounds check. An attacker can craf

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:2fd91126ff22b52aa60e13a1e79343c06ea381359f63bb8136702cdcc0258244

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

cwe · 2 assertions

{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"n/a","lang":"en","type":"text"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/cna/problemTypes/0/descriptions/0

Affected products and versions

1 source assertion

{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/adp/0/metrics/0/cvssV3_1

CWE assertions

2 source assertions

{"cweId":"CWE-400","description":"CWE-400 Uncontrolled Resource Consumption","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/adp/0/problemTypes/0/descriptions/0

{"description":"n/a","lang":"en","type":"text"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/cna/problemTypes/0/descriptions/0

Source references

4 source assertions

{"url":"https://github.com/cthackers/adm-zip"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/cna/references/0

{"url":"https://github.com/cthackers/adm-zip/issues/568"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/cna/references/2

{"tags":["exploit"],"url":"https://github.com/cthackers/adm-zip/issues/568"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/adp/0/references/0

{"url":"https://www.npmjs.com/package/adm-zip"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:9d7afba2df79f59ee6889f00879400345976e4577b1c581a344427c9bfd52b1d · sha256:27fa68a547165249… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer