Multiple CVEs Identified in zlib 1.2.8 Affecting Compression Functions

First seen 18 Feb 2026, 09:15 UTC • Api.Msrc.Microsoft

•41

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two vulnerabilities, CVE-2016-9840 and CVE-2016-9841, have been identified in the zlib 1.2.8 library, specifically in the inftrees.c and inffast.c files, respectively. Both vulnerabilities were published on May 23, 2017, and may allow for context-related issues, potentially impacting applications using this version of zlib.

How this analysis works

Timeline

2017-05-23

CVE-2016-9840 published

2017-05-23

CVE-2016-9841 published

2026-02-18

Information published about CVE-2016-9840 and CVE-2016-9841

Continue Reading

Critical Ruby Vulnerabilities in IMAP and GzipReader Affecting Ubuntu Depthfirst Unveils $5M Initiative to Address Critical Vulnerabilities in Open Source Software Critical MongoDB Vulnerability Exposes Sensitive Data via zlib Compression

Multiple CVEs Identified in zlib 1.2.8 Affecting Compression Functions

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading