ZZipLib versions through 0.13.80 implement a library that reads ZIP archives from disk. The vulnerability arises in the function that parses the central directory; a malicious archive can place an end‑of‑central‑directory record such that the first entry is near the buffer’s end. When the library copies the entry name, it reads past the allocated heap buffer, resulting in an over‑read that can expose surrounding memory contents or crash the application. This flaw is classified as CWE‑125 and directly affects confidentiality if memory contents can be exfiltrated. The severity is reflected in a CVSS score of 6.8, indicating moderate impact.

The affected product is ZZipLib, developed by gdraheim, with vulnerable releases up to version 0.13.80. Any deployment that uses this library to process user‑supplied ZIP files, such as archival tools or backup utilities, is potentially impacted.

The CPES identify GDRAHEIM ZZipLib; the issue is present in all releases older than 0.13.81. No exploit data or public proof‑of‑concepts are documented, and the EPSS score is not available, implying limited publicly known exploitation activity. The attack vector is inferred to be local or remote file‑based depending on whether the application accepts external ZIP inputs. The CVSS base score of 6.8 classifies the vulnerability as requiring remediation, whereas the absence from the KEV catalog suggests that it is not currently the target of widespread known attacks.