CVE-2023-48107: Zlib-NG Minizip-NG

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Buffer Overflow vulnerability in zlib-ng minizip-ng v.4.0.2 allows an attacker to execute arbitrary code via a crafted file to the mz_path_has_slash function in the mz_os.c file.

Affected products

• Zlib-NG Minizip-NG: version 4.0.2 only

Published 2023-11-22. Last modified 2026-06-17.