Heap Buffer Overflow

ibminizip-ng.so is vulnerable to Heap Buffer Overflow. The vulnerability is due to the mz_path_resolve function in mz_os.c because there is no boundary checking during the backward search for slashes in the path resolution function. This allows an attacker to craft a file with a specially structured path that causes the pointer to go outside the intended buffer boundaries and potentially leads to a buffer overflow and an application crash.