CVE-2021-33196

Published: 2 August 2021

In archive/zip in Go before 1.15.13 and 1.16.x before 1.16.5, a crafted file count (in an archive's header) can cause a NewReader or OpenReader panic.

Priority

Medium

CVSS 3 base score: 7.5

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33196
• https://github.com/golang/go/issues/46242
• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33912
• NVD
• Launchpad
• Debian