Known Vulnerabilities for Zlib by Zlib Software
Listed below are 10 of the newest known vulnerabilities associated with "Zlib" by "Zlib Software".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102560 json | A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, trunca... | Not Provided | 2026-09-29 | 2026-09-29 |
| CVE-2026-100723 json | vm2 before 3.12.2 does not apply its Buffer backing-store ownership invariant (byteOffset === 0 and buffer.byteLength === len... | Not Provided | 2026-09-27 | 2026-10-01 |
| CVE-2026-92000 json | adm-zip versions 0.5.14 through 0.6.0 fail to apply zlib decompression output limits when ZIP entries declare zero uncompress... | Not Provided | 2026-09-15 | 2026-09-24 |
| CVE-2026-91135 json | Heap-based buffer overflow vulnerability in Apache Thrift C++ THeaderTransport. When an application enables the ZLIB trans... | Not Provided | 2026-10-02 | 2026-10-02 |
| CVE-2026-89717 json | In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_com... | Not Provided | 2026-09-11 | 2026-09-21 |
| CVE-2026-87776 json | compression is a Node.js and Express compression middleware. In versions before 1.8.2, when a client aborts the connection wh... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-85091 json | zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing ... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-85024 json | undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib in... | Not Provided | 2026-09-04 | 2026-09-04 |
| CVE-2026-84384 json | libheif is a HEIF and AVIF file format decoder and encoder. From 1.19.0 until 1.23.2, crafted HEIF or AVIF mime metadata and ... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-77640 json | tor before 0.4.9.9 was prone to an infinite loop when decompressing a truncated zlib/gzip stream with done=1. A truncated st... | Not Provided | 2026-08-20 | 2026-08-21 |