Potential Integer Overflow vulnerability in Zoe/zoelsochore.c

[KSB21ST]

Hi,
It seems that there exists a potential buffer overflow, according to the following code:

SNAP/Zoe/zoeHMM.c

Line 495 in daf76ba

char * ZOE = getenv("ZOE");

SNAP/Zoe/zoeHMM.c

Line 500 in daf76ba

sprintf(path, "%s/HMM/%s", ZOE, file);

getenv("ZOE") can be an arbitrary large number and cause buffer overflow while executing sprintf().