CVE-2025-5031: Ackites KillWxapkg Zip Bomb Resource Exhaustion

The primary source of information is the GitHub issue #86 referenced in the vulnerability details. This issue includes a Proof of Concept (PoC) written in Go. The PoC explicitly calls a function UnpackWxapkg to demonstrate the vulnerability. The description of the vulnerability also points to the 'wxapkg File Decompression Handler' as the affected component. Although I could not retrieve the exact file content for unpack.go (it might have been moved, renamed, or the path is different), the PoC code within the issue provides strong evidence that UnpackWxapkg is the function that processes the malicious input and is therefore vulnerable to resource exhaustion. The PoC's createTestWxapkg1 function crafts a malicious package, and TestUnPack uses UnpackWxapkg to process it, triggering the resource consumption.