---
id: CVE-2021-4217
title: A flaw was found in unzip
summary: >-
  A flaw was found in unzip. The vulnerability occurs due to improper handling
  of Unicode strings, which can lead to a null pointer dereference. This flaw
  allows an attacker to input a specially crafted zip file, leading to a crash
  or code…
severity: none
cwe:
  - CWE-476
product: unzip
affected:
  - unzip unzip 6.0
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-08T20:55:11.997878Z'
published: '2022-08-24'
updated: '2026-11-02'
sourceUpdated: '2026-11-02T18:11:46.107Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2021-4217'
references:
  - url: 'https://bugs.launchpad.net/ubuntu/+source/unzip/+bug/1957077'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2044583'
  - url: 'https://access.redhat.com/security/cve/CVE-2021-4217'
tags:
  - cve.org
epss: 0.00618
epssPercentile: 0.49854
ingestedAt: '2026-11-05T19:30:42.769Z'
---

## Overview

A flaw was found in unzip. The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution.

## Affected

- `unzip unzip 6.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.