Pyminizip

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-45853 Oct 14, 02:15 PyPI CRITICAL PATCH CISA Act Now

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Integer Overflow Zlib Pyminizip

NVD HeroDevs GitHub VulDB

CVSS 3.1

9.8

EPSS

2.9%

Threat

4.0

CVE-2023-45853 PyPI

EPSS 3% 4.0 CVSS 9.8

CRITICAL PATCH Act Now

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Buffer Overflow Integer Overflow Zlib +1

NVD HeroDevs GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy