Gzip vulnerabilities

2 known vulnerabilities in Gzip from GNU. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  gzip: Buffer Over-read

  CVE-2026-41992Jun 29, 2026GNU

  GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats within a single execution. GNU gzip maintains a global array that is shared across t

• 8.8 High severity

  An arbitrary file write vulnerability was found in GNU gzip's zgrep utility.

  CVE-2022-1271Aug 31, 2022Gzip, Xz-utilsEPSS 5.55%

  An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can overwrite an attacker's content to an arbitrary attacker-selected file. This flaw