VULNERABILITY INTELLIGENCE

CVE-2024-24789

CVSS score5.5 MEDIUM
EPSS probability0.44%
CISA KEVNot currently listed
Published2024-06-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references