Root security vulnerabilities

Root is a big data processing tool developed by ROOT OpenSource. There is a security vulnerability in Root, which stems from a flaw in the zlib component inffast.C, potentially leading to memory corruption...

PT-2026-4887

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1...

Root security vulnerabilities

Root is a big data processing tool developed by ROOT OpenSource. Versions of Root 6.36.00-rc1 and earlier have security vulnerabilities. These vulnerabilities stem from a flaw in the zlib component inftrees.C, which may lead to memory corruption...

Furnace security vulnerabilities

Furnace is a chip tuning tracker developed by tildearrow. There is a security vulnerability in furnace, which stems from an out-of-bounds write operation and buffer overflow in the zlib component inflate.C, potentially allowing for the execution of arbitrary code...

CVE-2026-24812: Out-of-bounds Read

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1...

CVE-2026-24811: Improper Input Validation

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inffast.C. This issue affects root...

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9840)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9840 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9842)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9842 advisory. - The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified...

Azure Linux 3.0 Security Update: fltk / teckit (CVE-2023-6992)

The version of fltk / teckit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6992 advisory. - Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting th...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9841)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9841 advisory. - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improp...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9843)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9843 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impa...

MiracleLinux 9 : zlib-1.2.11-32.el9 (AXSA:2023-5086:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5086:03 advisory. zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Tenable has extracted the...

MiracleLinux 9 : gstreamer1-plugins-good-1.18.4-6.el9 (AXSA:2023-5649:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5649:01 advisory. gstreamer-plugins-good: Potential heap overwrite in gstmatroskademuxaddwvpkheader CVE-2022-1920 gstreamer-plugins-good: Heap-based buffer overflow i...

MiracleLinux 8 : zlib-1.2.11-18.el8 (AXSA:2022-3166:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3166:01 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...

MiracleLinux 9 : rsync-3.2.3-9.el9.1 (AXSA:2022-3960:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3960:06 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...

MiracleLinux 9 : mingw-zlib-1.2.12-2.el9 (AXSA:2023-5013:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5013:01 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : zlib-1.2.11-19.el8 (AXSA:2022-3921:04)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3921:04 advisory. zlib: a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field CVE-2022-37434 Tenable has extracted the...

MiracleLinux 8 : rsync-3.1.3-14.el8.2 (AXSA:2022-3663:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3663:03 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...

MiracleLinux 8 : mingw-zlib-1.2.8-10.el8 (AXSA:2022-4250:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-4250:01 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...