CVE-2022-0529

A flaw was found in Unzip. The vulnerability occurs during the conversion
of a wide string to a local string that leads to a heap of out-of-bound
write. This flaw allows an attacker to input a specially crafted zip file,
leading to a crash or code execution.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=2051402&gt;
• <https://bugzilla.redhat.com/show_bug.cgi?id=2048572 (private)>
• <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010355&gt;

Notes