CVE-2026-16517

Name of the Vulnerable Software and Affected Versions libarchive (affected versions not specified)

Description A signed integer overflow occurs in the ZIP writer. Within the archive write zip header() function in archive write set format zip.c, when ZIP encryption is active and the entry file size is near INT64 MAX, adding encryption overhead to the entry size overflows the int64 t type. This results in undefined behavior, which may lead to memory corruption or incorrect Zip64 extension decisions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.