Search results

ZIP Extraction Allows Arbitrary File Write via Pre-existing Dangling Symlink

Status: Open.

#1027 In zlib-ng/minizip-ng;

· cryptcrack opened on Jul 25, 2026

ZIP Extraction Preserves SUID/SGID Bits, Allowing Local Privilege Escalation

Status: Open.

#1026 In zlib-ng/minizip-ng;

· cryptcrack opened on Jul 23, 2026

Zip Slip via absolute-path entry names bypasses extraction path confinement (arbitrary file write)

Status: Open.

#1025 In zlib-ng/minizip-ng;

· cryptcrack opened on Jul 23, 2026

Stack-buffer-overflow in mz_zip_reader_entry_get_hash

Status: Open.

#1023 In zlib-ng/minizip-ng;

· cryptcrack opened on Jul 22, 2026

Zstd no longer detected with minizip-ng 4.2.0 or newer

Status: Open.

#1020 In zlib-ng/minizip-ng;

· brad0 opened on Jul 13, 2026

Is mz_zip_entry_read_close suitable with non-NULL args?

Status: Open.

#840 In zlib-ng/minizip-ng;

· thbeu opened on Feb 18, 2025

mz_stream_mem_set_buffer doesn't support memory buffers larger than 32 bit integer

help wantedNeed outside helpNeed outside help

Status: Open.

#744 In zlib-ng/minizip-ng;

· san-zemotion opened on Nov 22, 2023

Windows: DLL export mz functions in mz_zip.h

distributionRelease distributionRelease distribution

Status: Open.

#475 In zlib-ng/minizip-ng;

· jimpark opened on May 8, 2020

Status of integration in distributions

distributionRelease distributionRelease distribution

Status: Open.

#358 In zlib-ng/minizip-ng;

· Neustradamus opened on Jan 16, 2019