PT-2021-4457

Name of the Vulnerable Software and Affected Versions GNU cpio versions 2.13 and earlier Description The issue is caused by an integer overflow in the dstring.c component of the GNU cpio package, specifically in the ds fgetstr function. This overflow triggers an out-of-bounds heap write, allowing...