oops sorry I filed against the wrong project. This is in zlib not info-zip.
buffer overflow in zipRemoveExtraInfoBlock