Medium severity5.5OSV Advisory· Published Apr 23, 2019· Updated Jun 17, 2026
CVE-2019-11463
CVE-2019-11463
Description
A memory leak in archive_read_format_zip_cleanup in archive_read_support_format_zip.c in libarchive 3.3.4-dev allows remote attackers to cause a denial of service via a crafted ZIP file because of a HAVE_LZMA_H typo. NOTE: this only affects users who downloaded the development code from GitHub. Users of the product's official releases are unaffected.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3v3.0.0a, v3.0.1b, v3.1.900a, …+ 2 more
- (no CPE)range: v3.0.0a, v3.0.1b, v3.1.900a, …
- cpe:2.3:a:libarchive:libarchive:*:*:*:*:*:*:*:*range: <3.4.0
- (no CPE)range: <3.3.4
Patches
Vulnerability mechanics
References
3- github.com/libarchive/libarchive/commit/ba641f73f3d758d9032b3f0e5597a9c6e593a505nvdPatchThird Party Advisory
- github.com/libarchive/libarchive/issues/1165nvdExploitThird Party Advisory
- access.redhat.com/security/cve/cve-2019-11463nvdThird Party Advisory
News mentions
0No linked articles in our index yet.