Threats tagged 'ghsa-g5fp-32jq-cfw2'

zlib versions 1.3.1.2 through 1.3.2 have a heap buffer overflow vulnerability in the gz_vacate() function. This occurs when processing non-blocking gzwrite() operations with stale external buffer pointers. The overflow can be triggered by calling gzprintf() or gzvprintf() after a write stall, leading to an unchecked memmove() that writes beyond the internal input buffer boundary.