CVE-2016-9842

HighCVSS 8.8

Published: 23/05/2017(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

5.20%

92th percentile - higher than 92% of all known CVEs

Summary

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.

Risk Assessment

This vulnerability could lead to unpredictable behavior in applications using zlib, potentially allowing an attacker to compromise data integrity or cause system crashes.

Recommendation

It is recommended to upgrade zlib to version 1.2.9 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.