ruby-lang zlib vulnerabilities (CVE)

CVE records published for ruby-lang zlib, newest first. Follow to get an email when a new one appears.

1 results

1.7Low

CVE-2026-27820 6 months ago

zlib: Buffer Overflow in Zlib::GzipReader ungetc via large input leads to memory corruption

ruby zlib

zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0, 3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The zstream_buffer_ungets function prepends caller-provided bytes…