-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pyminizip | pip | <= 0.2.6 |
Miggo AIRoot Cause AnalysisThe vulnerability description states that MiniZip in zlib has an integer overflow in zipOpenNewFileInZip4_64 due to long filenames, comments, or extra fields. The provided commit 73331a6a0481067628f065ffe87bb1d8f787d10c in the madler/zlib repository patches this exact function in contrib/minizip/zip.c. The patch adds explicit checks for the lengths of these fields. Since pyminizip includes this vulnerable MiniZip code, zipOpenNewFileInZip4_64 is the identified vulnerable function. The pyminizip library itself doesn't have a patched version, but the vulnerability lies within the bundled zlib/MiniZip code it uses.
A Semantic Attack on Google Gemini - Read the Latest Research