CVE-2018-25032: Apple Mac OS X
High severity, CVSS 7.5. EPSS: 51.7% chance of exploitation in the next 30 days.
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.
Affected products
- Apple Mac OS X: from 10.15, before 10.15.7 (fixed in 10.15.7); version 10.15.7 only
- Apple macOS: from 11.0, before 11.6.6 (fixed in 11.6.6); from 12.0.0, before 12.4 (fixed in 12.4)
- Azul Zulu: version 6.45 only; version 7.52 only; version 8.60 only; version 11.54 only; version 13.46 only; version 15.38 only; …
- Debian Debian Linux: version 9.0 only; version 10.0 only; version 11.0 only
- Fedoraproject Fedora: version 34 only; version 35 only; version 36 only
- Goto Gotoassist: before 11.9.18 (fixed in 11.9.18)
- MariaDB MariaDB: from 10.3.0, before 10.3.36 (fixed in 10.3.36); from 10.4.0, before 10.4.26 (fixed in 10.4.26); from 10.5.0, before 10.5.17 (fixed in 10.5.17); from 10.6.0, before 10.6.9 (fixed in 10.6.9); from 10.7.0, before 10.7.5 (fixed in 10.7.5); from 10.8.0, before 10.8.4 (fixed in 10.8.4); …
- Netapp Active Iq Unified Manager: affected versions not specified
- Netapp E-Series Santricity OS Controller: from 11.0.0, up to and including 11.70.2
- Netapp h300s Firmware: affected versions not specified
- Netapp h410c Firmware: affected versions not specified
- Netapp h410s Firmware: affected versions not specified
- Netapp h500s Firmware: affected versions not specified
- Netapp h700s Firmware: affected versions not specified
- Netapp Hci Compute Node: affected versions not specified
- Netapp Management Services For Element Software: affected versions not specified
- Netapp Oncommand Workflow Automation: affected versions not specified
- Netapp Ontap Select Deploy Administration Utility: affected versions not specified
- Nokogiri Nokogiri: before 1.13.4 (fixed in 1.13.4)
- Python Python: from 3.7.0, before 3.7.14 (fixed in 3.7.14); from 3.8.0, before 3.8.14 (fixed in 3.8.14); from 3.9.0, before 3.9.13 (fixed in 3.9.13); from 3.10.0, before 3.10.5 (fixed in 3.10.5)
- Siemens Scalance SC622-2c Firmware: before 3.0 (fixed in 3.0)
- Siemens Scalance SC626-2c Firmware: before 3.0 (fixed in 3.0)
- Siemens Scalance SC632-2c Firmware: before 3.0 (fixed in 3.0)
- Siemens Scalance SC636-2c Firmware: before 3.0 (fixed in 3.0)
- Siemens Scalance SC642-2c Firmware: before 3.0 (fixed in 3.0)
- and 2 more
Published 2022-03-25. Last modified 2026-07-14.