5.5

CVE-2022-0530: apple mac_os_x

CVSS: 5.5v3.1MediumModified
AliasesALPINE-CVE-2022-0530UBUNTU-CVE-2022-0530DEBIAN-CVE-2022-0530
Published 09-02-2022Last modified 08-10-2026
Open JSON

Vulnerability summary

CVE-2022-0530 is a medium (CVSS 5.5) vulnerability in apple mac_os_x. EPSS estimates a 2.11% chance of exploitation in the next 30 days, higher than 81.5% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
2.11%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Advisory lineage

Upstream 0 · Downstream 7 · Related 4
DLA-3118-1DSA-5202-1MGASA-2022-0371OPENSUSE-SU-2024:12357-1SUSE-SU-2022:3386-1SUSE-SU-2022:3399-1

Timeline

  1. 09-02-2022
    PublishedVulnerability first disclosed.
  2. 08-10-2026
    Last modifiedVulnerability information updated.

Description

A flaw was found in Unzip. The vulnerability occurs during the conversion of a wide string to a local string that leads to a heap of out-of-bound write. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

2.11%

Chance of exploitation in the next 30 days

Percentile

82%

Versus all other CVEs

30-day change

0.00 pp

From 2.11% on 21-09-2026

21-09-202621-10-2026
EPSS score
2.11%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Unzip Poc

    Maturity: poc

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Apple2 products
  • mac_os_x≥ 10.15, < 10.15.7 | 10.15.7 | 10.15.7:security_update_2020 | 10.15.7:security_update_2020-001 | 10.15.7:security_update_2020-005 | 10.15.7:security_update_2020-007 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-006 | 10.15.7:security_update_2021-007 | 10.15.7:security_update_2021-008 | 10.15.7:security_update_2022-001 | 10.15.7:security_update_2022-002 | 10.15.7:security_update_2022-003 | 10.15.7:supplemental_update
  • macos≥ 11.0, < 11.6.6 | ≥ 12.0.0, < 12.4
Debian2 products
Alpine1 product
  • unzip< 6.0-r11
Fedoraproject1 product
Redhat1 product
Ubuntu1 product
  • unzip< 6.0-9ubuntu1.6+esm1 | < 6.0-20ubuntu1.1+esm1 | < 6.0-21ubuntu1.2 | < 6.0-25ubuntu1.1 | < 6.0-26ubuntu3.1
Unzip_project1 product

7 vendors · 9 products

References

17 links
Show all 17 references