CVE-2016-9840

HighCVSS 8.8

Published: 23/05/2017(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

4.79%

91th percentile - higher than 91% of all known CVEs

Summary

In zlib version 1.2.8, the inftrees.c file contains a vulnerability due to improper pointer arithmetic. This may allow context-dependent attackers to cause unspecified impacts.

Risk Assessment

The risk for the organization is the potential for remote code execution or data integrity compromise by an attacker exploiting this vulnerability in applications using zlib.

Recommendation

It is recommended to immediately update the zlib library to version 1.2.11 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.