CVE-2022-0529

This PoC demonstrates a heap out-of-bounds write/read vulnerability in unzip (CVE-2022-0529) during wide string to local string conversion. The exploit triggers memory corruption via a crafted zip archive, leading to potential DoS or further exploitation.

This PoC demonstrates a heap out-of-bounds write/read vulnerability in unzip (CVE-2022-0529) during wide string to local string conversion. The exploit triggers memory corruption via a malformed ZIP archive, leading to potential DoS or further exploitation.

This repository contains functional exploit scripts for CVE-2022-0529 and CVE-2022-0530, which are segmentation fault vulnerabilities in unzip 6.0. The scripts use Docker to reproduce the crash with valgrind, demonstrating the vulnerability.