CVE-2026-92000

A flaw was found in adm-zip. A remote attacker could exploit this vulnerability by crafting a malicious ZIP archive containing highly compressible entries that declare a zero uncompressed size. This oversight prevents the application of zlib decompression output limits, leading to excessive memory consumption and ultimately a Denial of Service (DoS) condition.

This Important vulnerability in adm-zip can lead to a denial of service in Red Hat products that process ZIP archives. By crafting malicious ZIP files with entries declaring zero uncompressed size, an attacker can exploit a flaw in zlib decompression limits, causing affected systems to exhaust memory resources. This impacts various components across Red Hat Enterprise Linux, OpenShift, and other platforms that rely on adm-zip for archive handling.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.