Skip to content
OpenAdvisories

Vendor

zlib

3 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.4
    CVE-2026-76844 Public exploit

    zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write

    zlib 1.2.11 through 1.3.2 contains a heap buffer overflow: after an underlying write() fails, gz_write() returns without resetting strm.next_in, leaving it pointed at the caller's buffer. A later gz* write call then derives a position from the stale pointer a…