Internet Bug Bounty · Report #168028
gzuncompress does NOT check output string size which leads to an overflow
Validstatus
$500bounty
1upvotes
12 Nov 2019disclosed
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original