Signed Integer Overflow Vulnerability in libarchive's ZIP Writer Affects Red Hat

CVE-2026-16517

What is CVE-2026-16517?

A signed integer overflow vulnerability exists in the ZIP writer of libarchive, specifically in the archive_write_zip_header function found in archive_write_set_format_zip.c. When ZIP encryption is enabled, and the entry file size approaches INT64_MAX, adding the encryption overhead to the entry size can cause an overflow of the int64_t type. This overflow may lead to undefined behavior, resulting in improper handling of the Zip64 extension or security risks such as memory corruption, thereby potentially compromising the integrity and security of the archived data.

References