cpu exhaustion

  1. CVE-2026-27171: Zlib 1.3.2 fixes CPU exhaustion in CRC combine

    A newly assigned vulnerability identifier, CVE-2026-27171, affects zlib releases older than 1.3.2: a logic error in the CRC‑combination helpers (crc32_combine64 and crc32_combine_gen64) can be driven into unbounded CPU consumption because an internal helper, x2nmodp, performs right shifts inside...