Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
madler/zlib
develop @ e3dc0a8
1
Fixes
14
CVEs
CRITICAL
Peak severity
0.0%
Coverage
Highlights
Information Disclosure: 1 prior fix. Scrutinize any change in this area.
infback.c: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Information Disclosure: An invalid distance code (too far back) in a deflate stream was not correctly detected during decompression, resulting in uninitialized memory being copied to the output stream via inflate_fast.
Heap-based Buffer Overflow: A large gzip header extra field in inflate.c causes a heap-based buffer over-read or buffer overflow when inflateGetHeader is called, leading to potential memory corruption or crashes.
Integer Overflow: MiniZip fails to safely validate long filenames, comments, or extra fields in zipOpenNewFileInZip4_64, leading to a heap-based buffer overflow during archive generation.