CVE-2024-24789
June 5, 2024, 4:15 p.m.
None
No Score
Description
The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file. The archive/zip package now rejects files containing these errors.
Product(s) Impacted
| Product | Versions |
|---|---|
| Go programming language |
|
Weaknesses
Tags
Date
- Published: June 5, 2024, 4:15 p.m.
- Last Modified: June 5, 2024, 4:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
security@golang.org
*Disclaimer: Some vulnerabilities do not have an associated CPE. To enhance the data, we use AI to infer CPEs based on CVE details. This is an automated process and might not always be accurate.