What is GHSA-4hh5-2hp6-3q94?

GHSA-4hh5-2hp6-3q94 is a security advisory published by GitHub Security Advisories with High severity. Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh ...

Which CVE IDs does GHSA-4hh5-2hp6-3q94 cover?

GHSA-4hh5-2hp6-3q94 covers the following CVE IDs: CVE-2020-24175. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4hh5-2hp6-3q94?

GHSA-4hh5-2hp6-3q94 has a CVSS v3 base score of 7.8, published by GitHub Security Advisories.

GHSA-4hh5-2hp6-3q94HighCVSS 7.8

Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh ...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-24175 →

📋 Description

Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2020-24175
https://gist.github.com/illikainen/315a420a9c28cbe882e16b8eba40b2e1
https://gist.github.com/illikainen/ced14e08e00747fef613ba619bb25bb4
https://illikainen.dev/advisories/014-yz1-izarc
http://yz1.com
https://github.com/advisories/GHSA-4hh5-2hp6-3q94