Root-project vulnerabilities
Published CVEs affecting Root-project products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-24812
Critical · 9.3
CWE-125 Jan 27, 2026
An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inftrees.C.
This issue affects root: through 6.36.00-rc1.
CVE-2026-24811
Critical · 9.8
CWE-20 Jan 27, 2026
An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c
Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C.
This issue affects root.