CVE-2026-22184
ADVISORY - nistSummary
zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer.
EPSS Score: 0.00388 (0.320)
Common Weakness Enumeration (CWE)
ADVISORY - nist
ADVISORY - redhat
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Alpine
CREATED
UPDATED
ADVISORY IDCVE-2026-22184
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| alpine/zlib | apk | alpine | 3.23 | <1.3.2-r0 | 1.3.2-r0 |
| alpine/zlib | apk | alpine | 3.21 | <1.3.2-r0 | 1.3.2-r0 |
| alpine/zlib | apk | alpine | 3.24 | <0 | 0 |
| alpine/zlib | apk | alpine | 3.24 | <1.3.2-r0 | 1.3.2-r0 |
| alpine/zlib | apk | alpine | 3.20 | <1.3.2-r0 | 1.3.2-r0 |
| alpine/zlib | apk | alpine | edge | <0 | 0 |
| alpine/zlib | apk | alpine | edge | <1.3.2-r0 | 1.3.2-r0 |
| alpine/zlib | apk | alpine | 3.22 | <1.3.2-r0 | 1.3.2-r0 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CVSS SCORE
4.6mediumDebian
CREATED
UPDATED
ADVISORY IDCVE-2026-22184
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AlowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-22184
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.8mediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-22184
EXPLOITABILITY SCORE
3.9
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
8.6highChainguard
CREATED
UPDATED
ADVISORY ID
CGA-4v8v-x7hx-h96w
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
Photon
CREATED
UPDATED
ADVISORY ID
CVE-2026-22184
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
7.8highminimos
CREATED
UPDATED
ADVISORY ID
MINI-w4p6-33x2-v3jq
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-