CVE-2026-85091

Name of the Vulnerable Software and Affected Versions zlib versions 1.3.1.2 through 1.3.2

Description A heap buffer overflow occurs in the gz vacate() function during the processing of non-blocking gzwrite() operations involving stale external buffer pointers. This issue is triggered when gzprintf() or gzvprintf() is called following a write stall, leading to an unchecked memmove() that writes data beyond the internal input buffer boundary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.