CVE-2024-39134

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service via the __zzip_fetch_disk_trailer() function at /zzip/zip.c.

• CWE-120

• https://github.com/gdraheim/zziplib/issues/165Exploit, Issue Tracking, Patch, Vendor Advisory
• https://github.com/gdraheim/zziplib/issues/165Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Jun 27, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-39126Roundup before 2.4.0 allows XSS via JavaScript in PDF, XML, …5.4
• CVE-2024-39129Heap Buffer Overflow vulnerability in DumpTS v0.1.0-nightly …5.3
• CVE-2024-3913An unauthenticated remote attacker can use this vulnerabilit…5.9
• CVE-2024-39130A NULL Pointer Dereference discovered in DumpTS v0.1.0-night…7.5
• CVE-2024-39132A NULL Pointer Dereference vulnerability in DumpTS v0.1.0-ni…6.5
• CVE-2024-39133Heap Buffer Overflow vulnerability in zziplib v0.13.77 allow…4.3
• CVE-2024-3914Use after free in V8 in Google Chrome prior to 124.0.6367.60…6.5
• CVE-2024-39143A stored cross-site scripting (XSS) vulnerability exists in …5.4
• CVE-2024-39148The service wmp-agent of KerOS prior 5.12 does not properly …8.1
• CVE-2024-3915The Swift Framework plugin for WordPress is vulnerable to un…5.3
• CVE-2024-39150vditor v.3.9.8 and before is vulnerable to Arbitrary file re…5.9
• CVE-2024-39152Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CV…