info-zip — Vulnerabilities & Security Advisories 4

Info-ZIP is a widely used open-source suite for creating and extracting ZIP archives, serving as a core utility for data compression across numerous platforms. Historically, vulnerabilities in Info-ZIP have commonly included buffer overflows leading to remote code execution, integer overflows, and path traversal flaws. While no major security incidents have been widely documented, the four recorded CVEs highlight potential risks in memory handling and input validation. The software's long-standing presence and broad deployment make it a persistent target for exploitation, particularly through malformed archive files that can trigger memory corruption or unauthorized access if proper safeguards aren't implemented.