CVE-2018-12913

Name of the Vulnerable Software and Affected Versions Miniz version 2.0.7

Description The issue is caused by an infinite loop in the tinfl decompress function in miniz tinfl.c. This occurs because the sym2 and counter variables can both remain equal to zero.

Recommendations For Miniz version 2.0.7, consider modifying the tinfl decompress function to prevent the infinite loop by ensuring sym2 and counter are updated correctly. At the moment, there is no information about a newer version that contains a fix for this vulnerability.