← Database

CVE-2021-4217

LOW CVSS: 3.3 Published: 2022-08-24 Modified: 2026-06-17

Description

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

Affected Platforms

Redhat Enterprise LinuxUnzip Project UnzipFedoraproject Fedora

Weakness Type

CWE-476, CWE-476

References