CyberSecBulletin

Zlib-ng vulnerabilities

We track 2 vulnerabilities in Zlib-ng products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 22, 2023.

2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score

Latest Zlib-ng vulnerabilities

  • 8.8 High severity

    Minizip-ng: Out-of-bounds Write

    CVE-2023-48107Zlib-ngEPSS 1.26%

    Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file.

  • 8.8 High severity

    Minizip-ng: Out-of-bounds Write

    CVE-2023-48106Zlib-ng

    Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.