The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers

inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic

zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname()

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches

zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate

zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write