CVE-2018-25032
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
- CVSS 3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- 52% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-25)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apple:mac_os_x
- apple:macos
- azul:zulu
- debian:debian_linux
- fedoraproject:fedora
- goto:gotoassist
- mariadb:mariadb
- netapp:active_iq_unified_manager
- netapp:e-series_santricity_os_controller
- netapp:h300s_firmware
- netapp:h410c_firmware
- netapp:h410s_firmware
- netapp:h500s_firmware
- netapp:h700s_firmware
- netapp:hci_compute_node
- netapp:management_services_for_element_software
- netapp:oncommand_workflow_automation
- netapp:ontap_select_deploy_administration_utility
- nokogiri:nokogiri
- python:python
- siemens:scalance_sc622-2c_firmware
- siemens:scalance_sc626-2c_firmware
- siemens:scalance_sc632-2c_firmware
- siemens:scalance_sc636-2c_firmware
- siemens:scalance_sc642-2c_firmware
- siemens:scalance_sc646-2c_firmware
- zlib:zlib
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-jc36-42cf-vqwj | RubyGems | nokogiri | <1.13.4 | 1.13.4 |