Zlib

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.CVE-2018-25032Zlib · CVSS 7.5 · 52% likely

   CWE-787

2. Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnprintf, allows attackers to cause a deni…CVE-2003-0107Zlib · 26% likely
3. zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a large gzip header extra field. NOTE: only applications that call inflateGetH…CVE-2022-37434Zlib · CVSS 9.8 · 19% likely

   CWE-120

4. The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free…CVE-2002-0059Zlib · 9.7% likely

   CWE-415

5. inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.CVE-2016-9841Zlib · 7.5% likely
6. The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.CVE-2016-9843Zlib · 5.8% likely
7. zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed stream with an incomplete code description of a length greater th…CVE-2005-2096Zlib · 5.6% likely
8. The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.CVE-2016-9842Zlib · CVSS 8.8 · 5.2% likely

   CWE-1335

9. inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.CVE-2016-9840Zlib · 4.9% likely
10. inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced.CVE-2005-1849Zlib · 4.1% likely
11. MiniZip in zlib through 1.3 has an integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_64 via a long filename, comment, or extra field. NOTE: MiniZip…CVE-2023-45853Zlib · CVSS 8.8 · 3.4% likely

    CWE-190

12. The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).CVE-2004-0797Zlib · 0.5% likely
13. zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed WriteCVE-2026-85091zlib · CVSS 7.4 · 0.5% likely

    CWE-787

14. zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()CVE-2026-22184zlib software · CVSS 8.6 · 0.4% likely

    CWE-787

15. zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.CVE-2026-27171zlib · CVSS 2.9 · 0.2% likely

    CWE-1284

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.