Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles.
[
{
"product": "Kodi (XBMC)",
"vendor": "XBMC Foundation",
"versions": [
{
"status": "affected",
"version": "<= v17.1"
}
]
}
]