CVE-2026-24812: An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c
Published Jan 27, 2026
·Updated
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inftrees.C.
This issue affects root: through 6.36.00-rc1.
Affected Software
1 affected component
root-project/root<=6.36.00-rc1
Event History
Jan 27, 2026
CVE Published
via MITRE·08:48 AM
Data Sourced
via MITRE·08:48 AM
Description
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-24812?
CVE-2026-24812 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2026-24812?
To fix CVE-2026-24812, upgrade the root-project/root software to a version beyond 6.36.00-rc1.
3
What are the potential impacts of CVE-2026-24812?
CVE-2026-24812 could lead to unexpected crashes or incorrect behavior of applications using the affected versions.
4
Which versions of the root-project are affected by CVE-2026-24812?
CVE-2026-24812 affects root-project/root versions up to and including 6.36.00-rc1.
5
Is there a workaround for CVE-2026-24812 while waiting for a patch?
Currently, there are no documented workarounds for CVE-2026-24812 other than upgrading to a patched version.