CVE-2016-9841

CriticalCVSS 9.8

Published: 23/05/2017(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

7.55%

94th percentile - higher than 94% of all known CVEs

Summary

In zlib version 1.2.8, the file inffast.c contains a vulnerability due to improper pointer arithmetic. This could allow context-dependent attackers to cause unspecified impacts.

Risk Assessment

The risk for the organization is the potential for remote code execution or data integrity compromise by an attacker exploiting this vulnerability in applications using zlib.

Recommendation

It is recommended to immediately update the zlib library to version 1.2.9 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.