zlib security advisories
2 threat alerts tracking vulnerabilities and security advisories that affect zlib products.
Vulnios monitors zlib CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent zlib security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2022-37434 — zlib, fedoraproject — zlib, fedora
zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. S
criticalCVE-2022-37434Critical Vulnerability: CVE-2002-0059 — zlib — zlib
The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow l
criticalCVE-2002-0059
Track zlib exposure across your environment
Vulnios automatically cross-references your asset inventory against new zlib CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan