GNU gzip vulnerabilities (CVE)

CVE records published for GNU gzip, newest first. Follow to get an email when a new one appears.

2 results
6.9Medium
CVE-2026-41992

Global Buffer Overflow in GNU gzip

GNU gzip

GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across …

2.0Low
CVE-2026-41991

Predictable Temporary File in GNU gzip

GNU gzip

GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to constructing a temporary file path based solely on the process ID (PID). This …