CVE-2026-27171

CVSS 3.1: 5.5 medium
EPSS: <1%p16
Published: Feb 18, 2026 · Feb 18, 2026
Modified: Jun 17, 2026

Analyze CVE-2026-27171 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition.

Vendors: zlib

Products: zlib

Weakness: CWE-1284

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news

1 story

Fwd: Announcing FreeType version 2.15.0

FreeType 2.15.0 fixes CVE-2026-95512, CVE-2026-50811, and vendored zlib flaw CVE-2026-27171.

oss-securityOct 13, 01:29 UTC · 29d agoVulnerabilityCVE-2026-95512 CVE-2026-50811 CVE-2026-271719 · 4 reads