CVE-2023-48107

Name of the Vulnerable Software and Affected Versions minizip-ng version 4.0.2

Description The issue is related to a Buffer Overflow vulnerability in the mz path has slash() function, located in the mz os.c file, which can be exploited by an attacker using a crafted file. This could allow a remote attacker to execute arbitrary code.

Recommendations For minizip-ng version 4.0.2, consider disabling the mz path has slash() function until a patch is available to prevent potential exploitation.