VULNERABILITY INTELLIGENCE
CVE-2016-9842
CVSS score8.8 HIGH
EPSS probability5.20%
CISA KEVNot currently listed
Published2017-05-23
Last modified2026-07-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.
Weakness classification
- CWE-1335: Incorrect Bitwise Shift of Integer
Primary references
- security@opentext.com — Broken Link
- security@opentext.com — Broken Link
- security@opentext.com — Broken Link
- security@opentext.com — Mailing List, Patch
- security@opentext.com — Third Party Advisory
- security@opentext.com — Third Party Advisory
- security@opentext.com — Broken Link, Third Party Advisory, VDB Entry
- security@opentext.com — Broken Link, Third Party Advisory, VDB Entry
- security@opentext.com — Third Party Advisory
- security@opentext.com — Third Party Advisory
- security@opentext.com — Third Party Advisory
- security@opentext.com — Third Party Advisory