cvedb.io
CVE-2026-27171
LOW · CVSS 2.9
EPSS exploitation probability: 0%
Published 2026-02-18T04:16:01.263 · Last modified 2026-06-17T10:26:47.357

Summary

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Affected products

zlib — zlib

Does this affect you?

Add your gear to cvedb and we'll alert you only when zlib ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.