CVE-2026-27171lowCWE-1284

CVE-2026-27171: low-severity vulnerability in zlib

Published

Follow this CVE+ Monitor zlib+ Monitor zlib

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.9epss 0.2%
zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
zlib · zlib
Related CVEs — zlib

In the same product, most dangerous first.

CVE-2026-76844HIGHzlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed WriteEPSS 0.6%CVE-2026-85091HIGHzlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacateEPSS 0.5%