{"id":"OSV-2026-1127","summary":"Heap-buffer-overflow in read_data","details":"OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447\n\n```\nCrash type: Heap-buffer-overflow READ 1\nCrash state:\nread_data\n_zip_source_call\nzip_source_read\n```\n","modified":"2026-08-21T14:16:21.351735Z","published":"2026-08-08T00:16:54.217891Z","references":[{"type":"REPORT","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=543583447"}],"affected":[{"package":{"name":"libzip","ecosystem":"OSS-Fuzz","purl":"pkg:generic/libzip"},"ranges":[{"type":"GIT","repo":"https://github.com/nih-at/libzip.git","events":[{"introduced":"385a0c4582f41b3037e6d40747e5da5f8f614f09"},{"fixed":"ff763f0e13d8e1ce37e50bcd7919f38d79c1d437"},{"fixed":"31eefd70f27d33a442466914f5919c84784eafd8"}]}],"ecosystem_specific":{"severity":"MEDIUM"},"database_specific":{"fixed_range":"492b34755151602cfd40144a8404ee5437b8f757:31eefd70f27d33a442466914f5919c84784eafd8","introduced_range":"4cd731076f4a18e3b4b2cc36b4bfb432f571dec5:b5064c161d4677a6147a08551a1f02b00eb813b3","source":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/libzip/OSV-2026-1127.yaml"}}],"schema_version":"1.8.0"}