PoC Index

CVE-2022-0529

MEDIUM 5.5EPSS 2.4%

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVSS v3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
2.42% chance of exploitation in the next 30 days, 83th percentile
Published
2022-02-09
Updated
2025-02-13

Proof-of-concept exploits (2)

References

Related