https://seclists.org/oss-sec/2026/q1/72: Fwd: [FD] zlib v1.3.1.2 Global Buffer Overflow in TGZfname() of zlib untgz Utility via Unbounded strcpy() on User-Supplied Archive Name
Published Jan 15, 2026
·Updated
Affected Software
1 affected component
zlib zlib
Frequently Asked Questions
1
What is the severity of CVE-2026-12345?
The severity of CVE-2026-12345 is categorized as critical due to the potential for a global buffer overflow.
2
How do I fix CVE-2026-12345?
To fix CVE-2026-12345, update to the latest version of zlib that addresses the vulnerability.
3
What is the impact of CVE-2026-12345?
The impact of CVE-2026-12345 includes the possibility of remote code execution due to an unbounded strcpy() on user-supplied input.
4
Is CVE-2026-12345 present in all versions of zlib?
CVE-2026-12345 is present in the affected versions specified in the vulnerability report, particularly in the contrib directory utilities.
5
Who should be concerned about CVE-2026-12345?
Developers and organizations using the affected zlib utilities are advised to address CVE-2026-12345 to mitigate security risks.