CyberRota Analysis
AI-GeneratedVersions 1.3.1.2 through 1.3.2 of zlib are vulnerable to a heap buffer overflow in the gz_vacate() function, which can be exploited during non-blocking gzwrite() operations when stale external buffer pointers are used. This vulnerability allows attackers to manipulate memory, potentially leading to arbitrary code execution. Organizations utilizing affected zlib versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.