zlib crc32_combine64 Heap Buffer Overflow DoS

The vulnerability of the crc32combine64 and crc32combinegen64 functions in the open-source data compression library zlib relates to the fact that the x2nmodp function may perform right shifts within a loop without a termination condition. Exploiting this vulnerability could allow an attacker to...

JLSEC-2026-480 zlib before 1.3.2 allows CPU consumption via `crc32_combine64` and `crc32_combine_gen64` because...

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

Updated zlib packages fix security vulnerability

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition. CVE-2026-27171...

OESA-2026-1585 zlib security update

Security Fixes: zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition.CVE-2026-27171...

CVE-2026-27171

A flaw was found in zlib. An attacker providing specially crafted input to the crc32combine64 or crc32combinegen64 functions could trigger an infinite loop within the x2nmodp function. This leads to excessive CPU consumption, which can result in a Denial of Service DoS for the affected system...

CVE-2026-27171

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...

Zlib security vulnerabilities

Zlib is a general-purpose data compression library developed by Mark Adler in the United States. Versions of Zlib prior to 1.3.2 contained security vulnerabilities. These vulnerabilities stemmed from the x2nmodp function in the crc32combine64 and crc32combinegen64 functions, which allowed right...

CVE-2026-27171: Improper Validation of Specified Quantity in Input

zlib before 1.3.2 allows CPU consumption via crc32combine64 and crc32combinegen64 because x2nmodp can do right shifts within a loop that has no termination condition...