← Back to browse · API

CVE-2016-9841

Severity
CRITICAL
CVSS
9.8
EPSS
0.0755
Risk score
41.84
CISA KEV
No
PoC
No
Published
2017-05-23
Modified
2026-07-14
First seen
2026-08-05
Aliases
EUVD-2016-10641, GHSA-5F8R-846V-423W
Products
apple:iphone_os, apple:mac_os_x, apple:tvos, apple:watchos, canonical:ubuntu_linux, debian:debian_linux, n/a:n/a n/a, netapp:active_iq_unified_manager, netapp:cloud_backup, netapp:e-series_santricity_management, netapp:e-series_santricity_os_controller, netapp:e-series_santricity_storage_manager, netapp:e-series_santricity_web_services, netapp:hci_storage_node, netapp:oncommand_balance, netapp:oncommand_insight, netapp:oncommand_performance_manager, netapp:oncommand_shift, netapp:oncommand_unified_manager, netapp:oncommand_workflow_automation, netapp:snapmanager, netapp:solidfire, netapp:steelstore_cloud_integrated_storage, netapp:storage_replication_adapter_for_clustered_data_ontap, netapp:symantec_netbackup, netapp:vasa_provider_for_clustered_data_ontap, netapp:virtual_storage_console, nodejs:node.js, opensuse:leap, opensuse:opensuse, oracle:database_server, oracle:jdk, oracle:jre, oracle:mysql, redhat:enterprise_linux_desktop, redhat:enterprise_linux_eus, redhat:enterprise_linux_server, redhat:enterprise_linux_workstation, redhat:satellite, zlib:zlib
Sources
nvd CVE-2016-9841
euvd EUVD-2016-10641

Description

inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.

References