CVE-2024-24789

Name of the Vulnerable Software and Affected Versions archive/zip package (affected versions not specified)

Description The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create a zip file with contents that vary depending on the implementation reading the file. The issue is related to the incorrect handling of zip files, which could allow an attacker to create an arbitrary zip file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.