CVE-2023-48106

CVSS 8.8 - HIGH

Description

Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.

Affected Products

Vendor	Product	Version
zlib-ng	minizip-ng	`4.0.2`

References

https://github.com/zlib-ng/minizip-ng/issues/740

Weakness Types

CWE-787

CVE Information

CVE ID:: CVE-2023-48106
Published:: 2023-11-22
Modified:: 2024-11-21
CVSS Score:: 8.8
Severity:: HIGH
Vector:: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Vendors

zlib-ng

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL