CVE-2018-1000035 (heap overflow in processing password-protected archives) CVE-2019-13232 (mishandles the overlapping of files inside a ZIP container) From Moritz Buhl