CVE Catalog
CVE-2018-25032
HighCVSS 7.5Exploitation Probability (EPSS)
Very high risk52.06%
99th percentile - higher than 99% of all known CVEs
Summary
A vulnerability in zlib before version 1.2.12 allows memory corruption during data compression when the input contains many distant matches.
Risk Assessment
An attacker could exploit this vulnerability to cause application crashes or potentially remote code execution, posing a serious risk to system stability and security.
Recommendation
Immediately update the zlib library to version 1.2.12 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.