Zlib-Ng: >> Minizip-Ng Security Vulnerabilities
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file.
CVSS Score
8.8
EPSS Score
0.001
Published
2023-11-22
Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.
CVSS Score
8.8
EPSS Score
0.002
Published
2023-11-22
Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.
CVSS Score
5.5
EPSS Score
0.017
Published
2018-01-16