CVE-2021-30833

A malicious archive file can trick macOS into writing files anywhere on your system. This is dangerous because an attacker could overwrite important system files or install malware.

The vulnerability exists in archive extraction logic where insufficient path validation allows directory traversal attacks. An attacker can craft a malicious archive with specially crafted file paths to write arbitrary files outside the intended extraction directory, potentially compromising system integrity.