Total vulnerabilities in the database
zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater than 1, which leads to a buffer overflow, as demonstrated using a crafted PNG file.
| Software | From | Fixed in |
|---|---|---|
| zlib / zlib | 1.2.1 | 1.2.1.x |
| zlib / zlib | 1.2.0 | 1.2.0.x |
| zlib / zlib | 1.2.2 | 1.2.2.x |