In ZZIPlib 0.13.67, there is a memory alignment error and bus error in the __zzip_fetch_disk_trailer function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file.
Created zziplib tracking bugs for this issue:
Affects: fedora-all [bug 1541257]
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):