← Back

CVE-2026-27171

nvd nist
Published: Feb 18, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Affected (1)

Products: Zlib: Zlib
Zlib
1 product
Zlib
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Zlib
From 1.2.12 to 1.3.2

Related CWEs

CWE-1284
Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.

References (6)

Source: cve@mitre.org
Product
Source: cve@mitre.org
Technical Description
Source: cve@mitre.org
ExploitIssue Tracking
Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Product
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Technical Description

Timeline

No history available yet.