EUVD-2026-42960
GHSA-xcpc-8h2w-3j85
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Untrusted ZIP reaches the parser remotely with no auth, complexity, or interaction; impact is a process crash only, so availability High and confidentiality/integrity None.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3Blast Radius
ecosystem impact- 471 npm packages depend on adm-zip (72 direct, 400 indirect)
Ecosystem-wide dependent count for version 0.6.0.
DescriptionCVE.org
adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP file with a manipulated uncompressed size header field. In zipEntry.js line 103, Buffer.alloc(_centralHeader.size) allocates memory based on the declared uncompressed size from the ZIP central directory header without validating it against the actual compressed data size or imposing any upper bound. The size value is read directly from the binary header at entryHeader.js line 266 with no bounds check. An attacker can craft a ~120-byte ZIP file that declares ~4GB uncompressed size, causing a memory allocation amplification ratio of over 33 million to 1. The allocation occurs before CRC validation, so the malicious payload cannot be rejected early. All extraction and read methods are affected: readFile(), readAsText(), extractEntryTo(), extractAllTo(), extractAllToAsync(), test(), and entry.getData(). Any application accepting untrusted ZIP files via adm-zip is vulnerable to immediate process crash.
AnalysisAI
Denial of service in adm-zip (a widely-used pure-JavaScript ZIP library for Node.js) before 0.5.18 lets remote attackers crash any application that parses untrusted archives by supplying a ~120-byte ZIP whose central-directory header declares a ~4GB uncompressed size, forcing an unbounded Buffer.alloc before CRC validation. SSVC rates exploitation as proof-of-concept with an automatable, partial technical impact; publicly available exploit code exists, though the flaw is not on CISA KEV and EPSS is low (0.43%, 35th percentile). Every extraction and read path is affected, so a single malformed entry causes an immediate process crash with a >33-million-to-1 memory amplification ratio.
Technical ContextAI
adm-zip parses the ZIP central directory and, at entryHeader.js line 266, reads the 32-bit uncompressed-size field directly from the binary header with no bounds check, then at zipEntry.js line 103 calls Buffer.alloc(_centralHeader.size) to pre-allocate the decompression output buffer. Because the attacker fully controls this size field and it is trusted before the actual compressed data or CRC-32 checksum is examined, a tiny file can request a multi-gigabyte allocation. This is a classic CWE-400 Uncontrolled Resource Consumption: the root cause is trusting an attacker-declared length as an allocation size instead of validating it against the real compressed stream length or capping it. The affected component is the Node.js adm-zip package distributed via npm; CPE data in the feed is a placeholder (cpe:2.3:a:n/a:n/a:*) and does not identify the product, so exact affected-product identification comes from the description and references rather than NVD CPE.
RemediationAI
Vendor-released patch: adm-zip 0.5.18 - upgrade the dependency to 0.5.18 or later (npm install adm-zip@^0.5.18 and update any lockfiles / transitive pins), which is the primary and complete fix. If you cannot upgrade immediately, apply compensating controls at the ingestion layer: reject or size-cap incoming archives before handing them to adm-zip, and validate that a ZIP entry's declared uncompressed size is plausible relative to the file's byte length (e.g., refuse entries whose declared size exceeds a hard limit such as a few hundred MB), accepting that legitimately large archives will be rejected; run archive parsing in a separate worker process or container with a constrained memory limit (e.g., Node --max-old-space-size or cgroup memory cap) so a crash isolates to the worker rather than the main service, at the cost of some throughput and added operational complexity; and restrict archive uploads to authenticated or trusted users where feasible. Track remediation via https://github.com/cthackers/adm-zip/issues/568 and https://nvd.nist.gov/vuln/detail/CVE-2026-39244.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allVendor StatusVendor
SUSE
Severity: Important| Product | Status |
|---|---|
| SUSE Linux Enterprise Micro 5.3 | Affected |
| SUSE Linux Enterprise Micro 5.3 | Affected |
| SUSE Linux Enterprise Micro 5.4 | Affected |
| SUSE Linux Enterprise Micro 5.4 | Affected |
| SUSE Linux Enterprise Micro 5.5 | Not-Affected |
| SUSE Linux Enterprise Micro 5.5 | Not-Affected |
| SUSE Linux Enterprise Server 16.0 | Not-Affected |
| SUSE Linux Enterprise Server 16.0 | Not-Affected |
| SUSE Linux Enterprise Server 16.1 | Not-Affected |
| SUSE Linux Enterprise Server 16.1 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.0 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Not-Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Not-Affected |
| SUSE Linux Micro 6.0 | Not-Affected |
| SUSE Linux Micro 6.0 | Not-Affected |
| SUSE Linux Micro 6.1 | Not-Affected |
| SUSE Linux Micro 6.1 | Not-Affected |
| SUSE Linux Micro 6.2 | Not-Affected |
| SUSE Linux Micro 6.2 | Not-Affected |
| openSUSE Leap 16.0 | Not-Affected |
| openSUSE Leap 16.0 | Not-Affected |
| openSUSE Leap Micro 5.5 | Not-Affected |
Share
External POC / Exploit Code
Leaving vuln.today