Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 07:39:44 +0000 CVE-2026-85091 — zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate https://vulnerability.circl.lu/vuln/cve-2026-85091 <p><strong>Affected:</strong> zlib</p> <p>zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.</p> <p><strong>Affected:</strong> zlib</p> <p>zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.</p> https://vulnerability.circl.lu/vuln/cve-2026-85091