CVE-2023-48106: Zlib-NG Minizip-NG

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_resolve function in the mz_os.c file.

Affected products

• Zlib-NG Minizip-NG: version 4.0.2 only

Published 2023-11-22. Last modified 2026-06-17.