CVE-2018-12913

2018-06-2718:29:00

Google

osv.dev

7.1 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

51.5%

In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero.

CPENameOperatorVersion
minizeq2.0.5
minizeq2.0.4
minizeq2.0.6
minizeq2.0.7
minizeq2.0.3
minizeq2.0.0
minizeq2.0.1
minizeq2.0.2

Name	Operator	Version
miniz	eq	2.0.5
miniz	eq	2.0.4
miniz	eq	2.0.6
miniz	eq	2.0.7
miniz	eq	2.0.3
miniz	eq	2.0.0
miniz	eq	2.0.1
miniz	eq	2.0.2

References

github.com/richgel999/miniz/issues/90