安全问题：pag依赖的zlib 存在CVE-2026-22184漏洞问题
Open
@CodeJhF is already working on this.
Since Jul 7, 2026.
- Dominant language
- HTML
- Stars
- 5.8k
- Forks
- 531
- Avg merge
- 8d 55m
- Merged PRs (30d)
- 17
Description
【版本信息】
4.3.33
【平台信息】
Android 原生
【预期的表现】
无CVE漏洞问题
【实际的情况】
存在 CVE-2026-22184 安全漏洞问题
【Demo及附件】
https://www.cve.org/CVERecord?id=CVE-2026-22184
https://www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-22184
zlib 1.3.1.2及之前版本存在缓冲区错误漏洞，该漏洞源于TGZfname函数存在全局缓冲区溢出，可能导致内存损坏、拒绝服务或代码执行。
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.