<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-01T21:26:38.335738+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/fkie_cve-2026-85091</id>
    <title>fkie_cve-2026-85091</title>
    <updated>2026-10-01T21:26:38.373097+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/fkie_cve-2026-85091"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/ghsa-g5fp-32jq-cfw2</id>
    <title>GHSA-g5fp-32jq-cfw2</title>
    <updated>2026-10-01T21:26:38.373315+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/ghsa-g5fp-32jq-cfw2"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/msrc_cve-2026-85091</id>
    <title>msrc_CVE-2026-85091 — zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate</title>
    <updated>2026-10-01T21:26:38.373350+00:00</updated>
    <content>msrc_CVE-2026-85091</content>
    <link href="https://db.gcve.eu/vuln/msrc_cve-2026-85091"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/ubuntu-cve-2026-85091</id>
    <title>UBUNTU-CVE-2026-85091</title>
    <updated>2026-10-01T21:26:38.373389+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: klibc, Ubuntu:Pro:14.04:LTS: zlib, Ubuntu:Pro:16.04:LTS: klibc, Ubuntu:Pro:16.04:LTS: rsync, Ubuntu:Pro:16.04:LTS: zlib, Ubuntu:16.04:LTS: zsync, Ubuntu:Pro:18.04:LTS: klibc, Ubuntu:Pro:18.04:LTS: rsync, Ubuntu:18.04:LTS: zlib, Ubuntu:18.04:LTS: zsync and 13 more</p>
<p>zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gz_vacate() function when processing non-blocking gzwrite() operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf() or gzvprintf() after a write stall, causing an unchecked memmove() to write beyond the internal input buffer boundary.</p></div>
    </content>
    <link href="https://db.gcve.eu/vuln/ubuntu-cve-2026-85091"/>
  </entry>
</feed>
