CVE-2026-47078: OTP 27.1 to before *; status changes: 27.3.4.15 — unaffected, 28.5.0.4 — unaffected, 29.0.4 — unaffected, 6.1 to…

Affected technology

OTP · 27.1 to before *; status changes: 27.3.4.15 — unaffected, 28.5.0.4 — unaffected, 29.0.4 — unaffected
Erlang

OTP · 6.1 to before *; status changes: 6.2.2.4 — unaffected, 7.3.0.1 — unaffected, 8.0.3 — unaffected
Erlang

OTP · 8d537f51a4262d24f3395c4148323eaca9facbbd to before 8a933c9c7835b06776d31d17b79b7336627d887a
Erlang

Component: zip
Function: zip:unzip/1, zip:unzip/2, zip:extract/1, zip:extract/2, zip:check_dir_level/2
File: lib/stdlib/src/zip.erl, src/zip.erl

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Source advisory’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality impact as none; integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.