Back to search
CVE-2026-22184
Published: Jan 7, 2026
Modified: May 14, 2026
PUBLISHED
Description
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.
| Vendor | Product | Versions |
|---|---|---|
zlib software | zlib | affected 0 - <= 1.3.1.2 |
Weaknesses (CWE)
References
https://seclists.org/fulldisclosure/2026/Jan/3
technical-description
exploit
https://zlib.net/
product
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now