{"id":"CVE-2022-37434","revision":"7f377b1380f94149a2a6263ed85dc6ae","records":[{"revision":"7f377b1380f94149a2a6263ed85dc6ae","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2022-37434","aliases":[],"title":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affec…","description":"zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g., see the nodejs/node reference).","state":0,"publishedAt":"2022-08-05T00:00:00+00:00","modifiedAt":"2026-10-14T17:26:17.899+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"n/a\",\n                    \"product\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"version\": \"n/a\",\n                            \"status\": \"unknown\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/ivd38/zlib_overflow","https://github.com/madler/zlib/commit/eff308af425b67093bab25f80f1ae950166bece1","https://github.com/madler/zlib/blob/21767c654d31d2dccdde4330529775c6c5fd5389/zlib.h#L1062-L1063","https://github.com/nodejs/node/blob/75b68c6e4db515f76df73af476eccf382bbcb00a/deps/zlib/inflate.c#L762-L764","http://www.openwall.com/lists/oss-security/2022/08/05/2","https://github.com/curl/curl/issues/9271","http://www.openwall.com/lists/oss-security/2022/08/09/1","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRQAI7H4M4RQZ2IWZUEEXECBE5D56BH2/","https://www.debian.org/security/2022/dsa-5218","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMBOJ77A7T7PQCARMDUK75TE6LLESZ3O/","https://security.netapp.com/advisory/ntap-20220901-0005/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWN4VE3JQR4O2SOUS5TXNLANRPMHWV4I/","https://lists.debian.org/debian-lts-announce/2022/09/msg00012.html","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/X5U7OTKZSHY2I3ZFJSR2SHFHW72RKGDK/","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAVPQNCG3XRLCLNSQRM3KAN5ZFMVXVTY/","https://support.apple.com/kb/HT213489","https://support.apple.com/kb/HT213488","https://support.apple.com/kb/HT213494","https://support.apple.com/kb/HT213493","https://support.apple.com/kb/HT213491","https://support.apple.com/kb/HT213490","http://seclists.org/fulldisclosure/2022/Oct/41","http://seclists.org/fulldisclosure/2022/Oct/38","http://seclists.org/fulldisclosure/2022/Oct/37","http://seclists.org/fulldisclosure/2022/Oct/42","https://security.netapp.com/advisory/ntap-20230427-0007/","https://github.com/madler/zlib/commit/1eb7682f845ac9e9bf9ae35bbfb3bad5dacbd91d"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2022-37434","license":"CVE Program Terms of Use","key":"cve-program:CVE-2022-37434","identifiers":["CVE-2022-37434"]},"retained":false,"historicalAffected":[]}],"coverage":[]}