A flaw was found in "fileio.c" in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a Heap of Out-of-Bound Write. This flaw allows an attacker to input a specially crafted zip file, leading to a Crash or Code Execution. This issue affects versions through 6.0-21ubuntu1.1, 6.0-25ubuntu1, 6.0-26ubuntu1, 6.0-26ubuntu3, and 6.0-27ubuntu1.
CWE-787 - Out-of-Bounds Write
Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.