Known vulnerabilities in Zlib
Vendor:
GNU
Software:
Zlib
Software CPE:
cpe:2.3:a:gnu:zlib:*:*:*:*:*:*:*:*
Website:
https://www.gnu.org/
Total vulnerabilities:
10
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
1.3.2
1.3.1.2
1.2.4-pre2
1.2.4-pre1
1.0-pre
1.3.1
1.3
1.2.13
1.2.12
1.2.11
1.2.10
1.2.9
1.2.8
1.2.7.3
1.2.7.2
1.2.7.1
1.2.7
1.2.6.1
1.2.6
1.2.5.3
1.2.5.2
1.2.5.1
1.2.5
1.2.4.5
1.2.4.4
1.2.4.3
1.2.4.2
1.2.4.1
1.2.4
1.2.3.9
1.2.3.8
1.2.3.7
1.2.3.6
1.2.3.5
1.2.3.4
1.2.3.3
1.2.3.2
1.2.3.1
1.2.3
1.2.2.4
1.2.2.3
1.2.2.2
1.2.2.1
1.2.1.2
1.2.1.1
1.2.0.8
1.2.0.7
1.2.0.6
1.2.0.5
1.2.0.4
1.2.0.3
1.2.0.2
1.2.0.1
1.1.0
0.99
0.95
0.94
0.93
0.92
0.91
0.79
0.71
0.9
0.8
1.2.0
1.2.2
1.2.1
1.1.4
1.0.1
1.1.1
1.0.2
1.0.7
1.1
1.0.8
1.0.9
1.1.2
1.0.3
1.1.3
1.0.4
1.0.5
1.0
1.0.6
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU123895 - Resource exhaustion CVE-2026-27171 |
CWE-400 | Medium | 1.3.2 | 11.03.2026 |
SB2026021955 SB2026031155 SB2026031156 and 10 more |
||
| #VU123089 - Out-of-bounds write CVE-2026-22184 |
CWE-787 | High | 1.3.2 | 19.02.2026 |
SB2026021955 SB2026030101 SB2026030102 and 2 more |
||
| #VU82299 - Heap-based Buffer Overflow CVE-2023-45853 |
CWE-122 | Medium | - | 23.10.2023 |
SB2023102325 SB2023102633 SB2023102634 and 40 more |
||
| #VU68812 - Heap-based Buffer Overflow CVE-2022-42800 |
CWE-122 | High | 1.2.13 | 27.10.2022 |
SB2022080705 SB2022102746 SB2022102521 and 4 more |
||
| #VU66153 - Heap-based Buffer Overflow CVE-2022-37434 |
CWE-122 | High | 1.2.13 | 07.08.2022 |
SB2022080705 SB2022081833 SB2022081851 and 154 more |
||
| #VU61671 - Memory corruption CVE-2018-25032 |
CWE-119 | Medium | 1.2.12 | 28.03.2022 |
SB2022032844 SB2022032845 SB2022033018 and 192 more |
||
| #VU6663 - Out-of-bounds read CVE-2016-9840 |
CWE-125 | Low | 1.2.9 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 47 more |
||
| #VU6664 - Out-of-bounds read CVE-2016-9841 |
CWE-125 | Low | 1.2.9 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 34 more |
||
| #VU6665 - Improper input validation CVE-2016-9842 |
CWE-20 | Low | 1.2.9 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 23 more |
||
| #VU6666 - Out-of-bounds read CVE-2016-9843 |
CWE-125 | Low | 1.2.9 | 24.05.2017 |
SB2017052312 SB2017052405 SB2017052406 and 29 more |