Internet Bug Bounty · Report #168027
gzdecode does NOT check output string size which leads to an overflow
Validstatus
$500bounty
1upvotes
12 Nov 2019disclosed
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original