Critical Zlib Vulnerability Let Attackers Trigger Buffer Overflow by Invoking untgz

Cybersecuritynews •Abinaya • January 12, 2026

A severe global buffer overflow vulnerability has been discovered in the zlib untgz utility version 1.3.1.2. Allowing attackers to corrupt memory and potentially execute malicious code through specially crafted command-line input. The security flaw resides in the TGZfname() function of the untgz utility, where an unbounded strcpy() call processes user-supplied archive names without any length […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Buffer Overflow Vulnerability in zlib untgz Utility A severe buffer overflow vulnerability has been identified in the zlib untgz utility version 1.3.1.2. This flaw allows attackers to corrupt memory and potentially execute malicious code by supplying specially crafted command-line arguments, specifically within the TGZfname() function that improperly handles user input through an unbounded strcpy() call. 3 sources 52

Extracted Entities

Vulnerabilities (1)

Zlib Vulnerability