← Database

CVE-2021-41772

HIGH CVSS: 7.5 Published: 2021-11-08 Modified: 2026-06-17

Description

Go before 1.16.10 and 1.17.x before 1.17.3 allows an archive/zip Reader.Open panic via a crafted ZIP archive containing an invalid name or an empty filename field.

Affected Platforms

Oracle Timesten In-Memory DatabaseGolang GoFedoraproject Fedora

Weakness Type

CWE-20

References