Vulnerabilities

CVSS

8.8 High

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Risk score

70.4

Published

2017-05-23

Status

Published

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

Coverage 1

vulnerability

Siemens CADRA

Siemens CADRA is affected by multiple vulnerabilities within the zlib library, primarily stemming from improper input validation and integer overflows. These vulnerabilities could lead to denial-of-service crashes, heap…

CISA Advisories · Jul 21, 2026 High

CVE-2005-2096CVE-2016-9840CVE-2016-9841zlibvulnerabilitybuffer overflow

All articles mentioning it

Advisories and references

• securityfocus.com/bid/95131
• securitytracker.com/id/1039427
• cert-portal.siemens.com/productcert/html/ssa-470355.html
• wiki.mozilla.org/images/0/09/Zlib-report.pdf
• lists.opensuse.org/opensuse-updates/2016-12/msg00127.html
• lists.opensuse.org/opensuse-updates/2017-01/msg00050.html
• lists.opensuse.org/opensuse-updates/2017-01/msg00053.html
• openwall.com/lists/oss-security/2016/12/05/21
• oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html
• oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html