Zlib vulnerabilities

Products

• Zlib 16
• Pigz 2

Newest

• ruby zlib zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate CVE-2026-85091 Fix available 8.3 HighSeptember 3, 2026
• ruby zlib zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write CVE-2026-76844 Fix available 8.3 HighAugust 24, 2026
• ruby zlib zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because... CVE-2026-27171 Fix available 2.9 LowFebruary 18, 2026
• ruby zlib, red hat logging subsystem for red hat openshift, build of openjdk 1.8 +14 more +16 more zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname() CVE-2026-22184 Fix availableDisputed 4.6 MediumJanuary 7, 2026
• smihica pyminizip, zlib, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 more pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency CVE-2023-45853 Fix available 9.8 CriticalOctober 14, 2023
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• nokogiri, zlib, apple mac os x +28 more +30 more Nokogiri affected by zlib's Out-of-bounds Write vulnerability CVE-2018-25032 Public exploitFix available EPSS 51.7% 7.5 HighMarch 25, 2022
• zlib, apple iphone os, mac os x +21 more +23 more The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have... CVE-2016-9843 Fix available 9.8 CriticalDecember 21, 2016
• zlib, apple iphone os, mac os x +17 more +19 more The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to... CVE-2016-9842 Fix available 8.8 HighDecember 21, 2016
• zlib, apple iphone os, mac os x +37 more +39 more inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by... CVE-2016-9841 Fix available 9.8 CriticalDecember 21, 2016
• zlib, apple iphone os, mac os x +18 more +20 more inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by... CVE-2016-9840 Fix available 8.8 HighDecember 21, 2016
• zlib pigz Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to... CVE-2015-1191 Fix available 5.0 MediumJune 10, 2013
• zlib pigz Race condition in pigz before 2.2.5 uses permissions derived from the umask when compressing a... CVE-2013-0296 Fix available 4.4 MediumJune 10, 2013
• zlib inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash)... CVE-2005-1849 Fix available 5.0 MediumJuly 20, 2005
• zlib, siemens cadra +1 more zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a... CVE-2005-2096 Fix available 7.5 HighJuly 6, 2005
• zlib The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1... CVE-2004-0797 Fix available 2.1 LowSeptember 14, 2004
• zlib Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf... CVE-2003-0107 Public exploitFix available EPSS 26.0% 7.5 HighMarch 7, 2003
• zlib The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and... CVE-2002-0059 9.8 CriticalMarch 15, 2002