Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP encryption is enabled and the entry file size is close to INT64_MAX, the addition of the encryption overhead to the entry size overflows int64_t, resulting in undefined behavior. This could lead to incorrect Zip64 extension decisions or potential memory corruption.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-07-21 | 2 | Disclosure2 |
| 2026-07-22 | 1 | Disclosure1 |
CVE-2026-16517 Signed Integer Overflow in libarchive ZIP Writer Encryption Header Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16517
Post summary
The text provides a basic disclosure of a signed integer overflow in libarchive’s ZIP writer encryption header function, linking to a vulnerability details page.
🚨*CVE* CVE-2026-16517 A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP enc… https://www.cve.org/CVERecord?id=CVE-2026-16517 ----- Traducción: CVE-2026-16517 Se … http://infoflow.cloud`
Post summary
A signed integer overflow vulnerability was disclosed in libarchive’s ZIP writer (archive_write_zip_header), but no exploit, patch, or active exploitation information is provided.
CVE-2026-16517 A signed integer overflow vulnerability was found in libarchive's ZIP writer. In the archive_write_zip_header function in archive_write_set_format_zip.c, when ZIP enc… https://www.cve.org/CVERecord?id=CVE-2026-16517
Post summary
The post reports a signed integer overflow vulnerability in libarchive's ZIP writer, providing function-level details, but makes no claims about exploitation, patches, or PoC.