CVE-2012-1162: Nih Libzip

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."

Affected products

• Nih Libzip: version 0.10 only

Published 2012-07-12. Last modified 2026-06-16.