CVE-2016-9840 inftrees.c in zlib 1.2.8 might allow context

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Identified in zlib 1.2.8 Affecting Compression Functions Two vulnerabilities, CVE-2016-9840 and CVE-2016-9841, have been identified in the zlib 1.2.8 library, specifically in the inftrees.c and inffast.c files, respectively. Both vulnerabilities were published on May 23, 2017, and may allow for context-related issues, potentially impacting applications using this version of zlib. 2 sources 41