Description

zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.

INFO

Published Date :

2026-01-07T20:25:19.892Z

Last Modified :

2026-03-05T01:30:07.359Z

Source :

VulnCheck
AFFECTED PRODUCTS

The following products are affected by CVE-2026-22184 vulnerability.

Vendors Products
Zlib
  • Zlib
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-22184.

URL Resource
https://github.com/madler/zlib cve-icon cve-icon cve-icon
https://github.com/madler/zlib/issues/1142 cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-22184 cve-icon
https://seclists.org/fulldisclosure/2026/Jan/3 cve-icon cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-22184 cve-icon
https://www.vulncheck.com/advisories/zlib-untgz-global-buffer-overflow-in-tgzfname cve-icon cve-icon cve-icon
https://zlib.net/ cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact