7.5
High
CVE-2018-25032 zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant…
Description
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| CADRA 2511 | earliest → < 2511 | 2511 |
| SINAMICS PERFECT HARMONY GH180 | Versions not published | |
| SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
| SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 | 3.1.0 → < 3.1.5 | 3.1.5 |
References
- www.openwall.com www.openwall.com
- github.com github.com
- [oss-security] 20220325 Re: zlib memory corruption on deflate (i.e. compress) www.openwall.com
- [oss-security] 20220326 Re: zlib memory corruption on deflate (i.e. compress) www.openwall.com
- DSA-5111 www.debian.org
- [debian-lts-announce] 20220402 [SECURITY] [DLA 2968-1] zlib security update lists.debian.org
- FEDORA-2022-413a80a102 lists.fedoraproject.org
- FEDORA-2022-dbd2935e44 lists.fedoraproject.org
- FEDORA-2022-12b89e2aad lists.fedoraproject.org
- [debian-lts-announce] 20220507 [SECURITY] [DLA 2993-1] libz-mingw-w64 security update lists.debian.org
- 20220516 APPLE-SA-2022-05-16-4 Security Update 2022-004 Catalina seclists.org
- 20220516 APPLE-SA-2022-05-16-3 macOS Big Sur 11.6.6 seclists.org
- 20220516 APPLE-SA-2022-05-16-2 macOS Monterey 12.4 seclists.org
- FEDORA-2022-61cf1c64f6 lists.fedoraproject.org
- www.oracle.com www.oracle.com
- www.openwall.com www.openwall.com
- www.openwall.com www.openwall.com
- github.com github.com
- github.com github.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- support.apple.com support.apple.com
- security.netapp.com security.netapp.com
- security.netapp.com security.netapp.com
- FEDORA-2022-3a92250fd5 lists.fedoraproject.org
- FEDORA-2022-b58a85e167 lists.fedoraproject.org
- [debian-lts-announce] 20220916 [SECURITY] [DLA 3114-1] mariadb-10.3 security update lists.debian.org
- GLSA-202210-42 security.gentoo.org
- cert-portal.siemens.com cert-portal.siemens.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated