https://seclists.org/oss-sec/2026/q1/174: zlib security audit by 7asecurity
Published Feb 17, 2026
·Updated
Affected Software
1 affected component
zlib
Frequently Asked Questions
1
What is the severity of ZLB-01-001?
The severity of ZLB-01-001 is classified as high due to the potential for a heap buffer overflow.
2
What is the main cause of ZLB-01-001?
ZLB-01-001 is caused by a heap buffer overflow via the legacy gzprintf implementation that requires specific compilation flags.
3
How do I fix ZLB-01-001?
To fix ZLB-01-001, ensure zlib is compiled without the -DNO_vsnprintf and -DNO_snprintf flags and update to the latest version.
4
Which versions of zlib are affected by ZLB-01-001?
ZLB-01-001 affects versions of zlib built with specific configuration flags that disable certain functions.
5
What is the impact of exploiting ZLB-01-001?
Exploiting ZLB-01-001 can lead to denial of service or arbitrary code execution due to the heap buffer overflow.