Security Advisory
CVE-2024-37407
9.1
CRITICAL
Vulnerability Description
Libarchive before 3.7.4 allows name out-of-bounds access when a ZIP archive has an empty-name file and mac-ext is enabled. This occurs in slurp_central_directory in archive_read_support_format_zip.c.
Published Date
June 8, 2024
Official Source
NIST NVD Advisory