Skip to main content

Out-of-bounds Write

CVE-2022-0530

Medium
5.5/10

Summary

A flaw was found in "fileio.c" in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a Heap of Out-of-Bound Write. This flaw allows an attacker to input a specially crafted zip file, leading to a Crash or Code Execution. This issue affects versions through 6.0-21ubuntu1.1, 6.0-25ubuntu1, 6.0-26ubuntu1, 6.0-26ubuntu3, and 6.0-27ubuntu1.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • REQUIRED
  • NONE
  • NONE
  • HIGH

CWE-787 - Out-of-Bounds Write

Out-of-bounds write vulnerability is a memory access bug that allows software to write data past the end or before the beginning of the intended buffer. This may result in the corruption of data, a crash, or arbitrary code execution.

References

Advisory Timeline

  • Published