CVE-2026-24793 A heap-based buffer over-read or buffer overflow vulnerability in azerothcore/azerothcore-wotlk

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in azerothcore azerothcore-wotlk deps/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0...

CVE-2026-24793: Out-of-bounds Write

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in azerothcore azerothcore-wotlk deps/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects azerothcore-wotlk: through v4.0.0...

CVE-2026-24799: Out-of-bounds Write

Out-of-bounds Write, Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in davisking dlib dlib/external/zlib modules. This vulnerability is associated with program files inflate.C. This issue affects dlib: before v19.24.9...

PT-2026-4886

Name of the Vulnerable Software and Affected Versions root affected versions not specified Description An issue exists within the root-project root, specifically in the builtins/zlib modules, related to program files inffast.C. Recommendations At the moment, there is no information about a newer...

PT-2026-4862

Name of the Vulnerable Software and Affected Versions azerothcore-wotlk versions through 4.0.0 Description The software contains an out-of-bounds write issue, specifically a buffer copy without checking the size of the input, often referred to as a classic buffer overflow. This issue is present i...

Root security vulnerabilities

Root is a big data processing tool developed by ROOT OpenSource. There is a security vulnerability in Root, which stems from a flaw in the zlib component inffast.C, potentially leading to memory corruption...

Root security vulnerabilities

Root is a big data processing tool developed by ROOT OpenSource. Versions of Root 6.36.00-rc1 and earlier have security vulnerabilities. These vulnerabilities stem from a flaw in the zlib component inftrees.C, which may lead to memory corruption...

Furnace security vulnerabilities

Furnace is a chip tuning tracker developed by tildearrow. There is a security vulnerability in furnace, which stems from an out-of-bounds write operation and buffer overflow in the zlib component inflate.C, potentially allowing for the execution of arbitrary code...

PT-2026-4887

Name of the Vulnerable Software and Affected Versions root versions through 6.36.00-rc1 Description A flaw exists in the root-project root builtins/zlib modules related to program files inftrees.C. Recommendations Update to a version later than 6.36.00-rc1...

CVE-2026-24812: Out-of-bounds Read

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1...

CVE-2026-24811: Improper Input Validation

Vulnerability in root-project root builtins/zlib modules. This vulnerability is associated with program files inffast.C. This issue affects root...

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64

MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip464 via a long filename, comment, or extra field. NOTE: MiniZip is not a supported part of the zlib product. NOTE: pyminizip through 0.2.6 is also vulnerable because it bundles an...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9840)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9840 advisory. - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9842)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9842 advisory. - The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified...

Azure Linux 3.0 Security Update: fltk / teckit (CVE-2023-6992)

The version of fltk / teckit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6992 advisory. - Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting th...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9841)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9841 advisory. - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improp...

Azure Linux 3.0 Security Update: fltk (CVE-2016-9843)

The version of fltk installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-9843 advisory. - The crc32big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impa...

MiracleLinux 9 : gstreamer1-plugins-good-1.18.4-6.el9 (AXSA:2023-5649:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-5649:01 advisory. gstreamer-plugins-good: Potential heap overwrite in gstmatroskademuxaddwvpkheader CVE-2022-1920 gstreamer-plugins-good: Heap-based buffer overflow i...

MiracleLinux 8 : zlib-1.2.11-18.el8 (AXSA:2022-3166:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3166:01 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...

MiracleLinux 9 : rsync-3.2.3-9.el9.1 (AXSA:2022-3960:06)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3960:06 advisory. zlib: A flaw found in zlib when compressing not decompressing certain inputs CVE-2018-25032 Tenable has extracted the preceding description block directly fr...