Lucene search

K
osvGoogleOSV:CVE-2022-0529
HistoryFeb 09, 2022 - 11:15 p.m.

CVE-2022-0529

2022-02-0923:15:16
Google
osv.dev
12
unzip
heap
out-of-bound
wide string
local string
zip file
vulnerability
crash
code execution

EPSS

0.002

Percentile

53.8%

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.