CVE-2017-12858: Libzip

Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days.

Double free vulnerability in the _zip_dirent_read function in zip_dirent.c in libzip allows attackers to have unspecified impact via unknown vectors.

Affected products

• Libzip Libzip: version 1.2.0 only

Published 2017-08-23. Last modified 2026-06-17.