minizip vulnerability

The minizip vulnerability tag covers discussions about security flaws in the MiniZip library, which is part of the zlib project. A key topic is CVE-2023-45853, an integer overflow leading to a heap buffer overflow in the zipOpenNewFileInZip4_64 function. The tag explores how this vulnerability affects Microsoft products, particularly Azure Linux, and clarifies that Microsoft's advisory about the library being included in Azure Linux does not rule out its presence in other Microsoft artifacts. Discussions also touch on software bill of materials (SBOM) and vulnerability exploitability exchange (VEX) documentation for assessing exposure. The tag is relevant for IT professionals and security researchers tracking open-source library risks in enterprise environments.