CVE-2024-43399

creationtimestamp| type| source ---|---|--- 2024-08-19 17:41:43+00:00| seen| https://t.me/cvedetector/3516 2024-08-26 16:57:49+00:00| published-proof-of-concept| https://t.me/HackingInsights/11348 2025-03-25 15:55:29+00:00| seen| https://t.me/androidMalware/2321...

CVE-2024-43399 Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

Mobile Security Framework MobSF is a pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis. Before 4.0.7, there is a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure...

CVE-2024-43399

MobSF (Mobile Security Framework) prior to version 4.0.7 contains a Zip Slip vulnerability in the Static Libraries analysis when extracting .a files. The mitigation (decoding and string replacement) is bypassable (e.g., using sequences like ....//....//....//), allowing extraction to arbitrary se...