Threats tagged 'ghsa-v498-cj6g-8848'

A heap-based buffer overflow vulnerability exists in the hex_to_binary function of the PKZIP hash parser in hashcat version 7.1.2. This flaw allows an attacker to cause denial of service or potentially execute arbitrary code by providing a specially crafted PKZIP hash file. The vulnerability affects several hashcat modules (17200, 17210, 17220, 17225, and 17230) and is triggered when attacker-controlled hex data is decoded into a fixed-size buffer without proper input-length validation.