CVE-2026-32630 - Vulnerability Analysis
MediumCVSS: 5.3Last Updated: March 17, 2026
file-type - Denial of Service
Published: March 16, 2026Updated: March 17, 2026PoC AvailableRemote Exploitable
Overview
file-type 20.0.0 to 21.3.1 contains a denial of service caused by lack of ZIP inflate output limit enforcement in known-size inputs during type detection, letting attackers trigger excessive memory growth, exploit requires crafted ZIP file.
Severity & Score
Severity: Medium
CVSS Score: 5.3
Impact
Attackers can cause excessive memory consumption leading to denial of service by crashing or slowing down the system.
Mitigation
Upgrade to version 21.3.2 or later.
References
Related Resources
Details
- CVE ID
- CVE-2026-32630
- Severity
- Medium
- CVSS Score
- 5.3
- Type
- denial_of_service
- Status
- confirmed
CWE
- CWE-409
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L