https://seclists.org/oss-sec/2026/q1/175: zlib security audit by 7asecurity
Published Feb 17, 2026
·Updated
Affected Software
1 affected component
zlib zlib
Frequently Asked Questions
1
What is the severity of ZLB-01-001?
The severity of ZLB-01-001 is classified as high due to the potential for a heap buffer overflow.
2
How do I fix ZLB-01-001?
To fix ZLB-01-001, ensure that zlib is not built with the flags -DNO_vsnprintf and -DNO_snprintf.
3
What is the nature of the vulnerability ZLB-01-001?
ZLB-01-001 is a heap buffer overflow vulnerability stemming from the legacy gzprintf implementation.
4
Which versions of zlib are affected by ZLB-01-001?
ZLB-01-001 affects versions of zlib that are built with specific compiler flags that disable snprintf functionality.
5
What are the consequences of exploiting ZLB-01-001?
Exploiting ZLB-01-001 could lead to arbitrary code execution or application crashes due to the heap buffer overflow.