libzip 1.2.0

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:libzip:libzip:1.2.0:*:*:*:*:*:*:*

part: a version: 1.2.0 update: *

VendorLibzip (9d23e381-449a-5a95-9c5a-3ec8c191460d)
ProductLibzip (649f6eca-8a0e-59af-8bb5-b8645153f7ef)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libzip purl2cpe 2026-06-01 10:16:22.498878
pkg:deb/ubuntu/libzip purl2cpe 2026-06-01 10:16:22.498879
pkg:github/nih-at/libzip purl2cpe 2026-06-01 10:16:22.498881
pkg:nuget/libzip purl2cpe 2026-06-01 10:16:22.498882
pkg:rpm/centos/libzip purl2cpe 2026-06-01 10:16:22.498883
pkg:rpm/fedora/libzip purl2cpe 2026-06-01 10:16:22.498885
pkg:rpm/opensuse/libzip purl2cpe 2026-06-01 10:16:22.498886

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-17582 vulnerable 2026-06-08 05:13:10.777107 Details available
A use-after-free in the _zip_dirent_read function of zip_dirent.c in libzip 1.2.0 allows attackers to have an unspecified impact by attempting to unzip a malformed ZIP archive. NOTE: the discoverer states "This use-after-free is triggered prior to the double free reported in CVE-2017-12858."
Published: 2021-02-09T18:07:57.000Z
Updated: 2024-08-05T01:47:13.117Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12858 vulnerable 2026-06-08 05:08:47.970295 Details available
Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.
Published: 2017-08-23T14:00:00.000Z
Updated: 2024-08-05T18:51:06.701Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.