CVE-2026-24811: An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c
Published Jan 27, 2026
·Updated
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C.
This issue affects root.
Affected Software
2 affected components
root-project/root
ROOT ROOT<=6.34.08
Remediation
Patch Available
Event History
Jan 27, 2026
CVE Published
via MITRE·08:47 AM
Data Sourced
via MITRE·08:47 AM
Description
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Feb 27, 58104
Event
via FIRST·02:02 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-24811?
CVE-2026-24811 has a medium severity due to improper pointer arithmetic in the affected software.
2
How do I fix CVE-2026-24811?
To fix CVE-2026-24811, update to the latest version of root-project/root where the vulnerability has been addressed.
3
What software is affected by CVE-2026-24811?
The software affected by CVE-2026-24811 is root-project/root, specifically in builtins/zlib/inffast.c.
4
What are the potential impacts of CVE-2026-24811?
The potential impacts of CVE-2026-24811 may include application crashes or unexpected behavior due to improper pointer handling.
5
Is CVE-2026-24811 being actively exploited?
As of the latest information, there is no public indication that CVE-2026-24811 is being actively exploited in the wild.