PT-2022-9407

Name of the Vulnerable Software and Affected Versions juce-framework/juce versions prior to 6.1.5 Description The issue allows for Arbitrary File Write via Archive Extraction Zip Slip through the ZipFile::uncompressEntry function in juce ZipFile.cpp. This is triggered when an archive is extracted...

PT-2022-9408

Name of the Vulnerable Software and Affected Versions juce-framework/JUCE versions prior to 6.1.5 Description This issue is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target directory, allowi...

CVE-2019-13453: Loop with Unreachable Exit Condition

Zipios before 0.1.7 does not properly handle certain malformed zip archives and can go into an infinite loop, causing a denial of service. This is related to zipheadio.h:readUint32 and zipfile.cpp:Zipfile::Zipfile...