CVE-2024-0450

Summary

CVE-2024-0450 is a vulnerability affecting the CPython `zipfile` module in versions 3.12.1, 3.11.7, 3.10.13, 3.9.18, and 3.8.18 and prior. This issue enables attackers to create zip-bombs with high compression ratios, exploiting the zip format's overlapping entries. The `zipfile` module in fixed versions of CPython now rejects such archives, mitigating the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.