Unzip vulnerabilities
3 known CVE vulnerabilities in Unzip, translated and rated.
- CVE-2021-4217Low
A flaw was found in unzip due to improper handling of Unicode strings, leading to a null pointer dereference. An attacker can supply a specially crafted zip file, causing a crash or code execution.
- CVE-2022-0530Medium
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap out-of-bounds write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
- CVE-2022-0529Medium
A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

