8.8
High
CVE-2016-9842 The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact…
Description
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
Affected products and versions
References
- RHSA-2017:1221 access.redhat.com
- RHSA-2017:1220 access.redhat.com
- RHSA-2017:3047 access.redhat.com
- [oss-security] 20161205 Re: CVE Request: zlib security issues found during audit www.openwall.com
- 95131 www.securityfocus.com
- RHSA-2017:3046 access.redhat.com
- openSUSE-SU-2017:0077 lists.opensuse.org
- GLSA-201701-56 security.gentoo.org
- 1039427 www.securitytracker.com
- RHSA-2017:1222 access.redhat.com
- openSUSE-SU-2017:0080 lists.opensuse.org
- RHSA-2017:3453 access.redhat.com
- openSUSE-SU-2016:3202 lists.opensuse.org
- RHSA-2017:2999 access.redhat.com
- [debian-lts-announce] 20190324 [SECURITY] [DLA 1725-1] rsync security update lists.debian.org
- USN-4246-1 usn.ubuntu.com
- [debian-lts-announce] 20200129 [SECURITY] [DLA 2085-1] zlib security update lists.debian.org
- USN-4292-1 usn.ubuntu.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- support.apple.com support.apple.com
- wiki.mozilla.org wiki.mozilla.org
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- wiki.mozilla.org wiki.mozilla.org
- bugzilla.redhat.com bugzilla.redhat.com
- github.com github.com
- GLSA-202007-54 security.gentoo.org
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated