CVE-2026-44722
pyzipper is a replacement for Python's zipfile that can read and write AES encrypted zip files. Prior to 0.4.0, a Python operator precedence bug in pyzipper/zipfile_aes.py caused the AE-2 format to never be automatically selected during encryption, causing encrypted entries to be written in AE-1 format and exposing the plaintext CRC32 checksum in the ZIP header and, for unseekable zip archives, in the datadescripter section, allowing an attacker who possesses the archive to brute-force candidate plaintexts for small or low-entropy files by comparing CRC32 values. This issue is fixed in version 0.4.0.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.2
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS probability
- 0.12%
- CWE
- CWE-480
- Published
- 2026-07-17
- Last modified
- 2026-07-17
Affected products
- danifus pyzipper
Weakness type
Related vulnerabilities
- CVE-2026-79643 — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to...
- CVE-2026-63421 — Keystone: `graphql.maxTake` bypass with negative `take`
- CVE-2026-15043 — DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text
- CVE-2026-48497 — Envoy: Abnormal process termination in DNS UDP filter
- CVE-2026-4748 — pf silently ignores certain rules
- CVE-2025-52985 — Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching
- CVE-2024-35190 — Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
- CVE-2022-1947 — Use of Incorrect Operator in polonel/trudesk