Zzlib

Products

Exploited and recent CVEs

• CVE-2026-85091 High 7.4 zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate 0.5%
• CVE-2026-76844 High 7.4 zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write 0.6%
• CVE-2026-27171 Low 2.9 zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition. 0.2%