CVE-2017-9434

Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.

• CWE-125

• http://openwall.com/lists/oss-security/2017/06/06/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/99007
• https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965Third Party Advisory
• https://github.com/weidai11/cryptopp/issues/414Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/
• http://openwall.com/lists/oss-security/2017/06/06/2Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/99007
• https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965Third Party Advisory
• https://github.com/weidai11/cryptopp/issues/414Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/

Published

Jun 5, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9428A directory traversal vulnerability exists in core\admin\aja…
• CVE-2017-9429SQL injection vulnerability in the Event List plugin 0.7.8 f…
• CVE-2017-9430Stack-based buffer overflow in dnstracer through 1.9 allows …
• CVE-2017-9431Google gRPC before 2017-04-05 has an out-of-bounds write cau…
• CVE-2017-9432Document Liberation Project libstaroffice before 2017-04-07 …
• CVE-2017-9433Document Liberation Project libmwaw before 2017-04-08 has an…
• CVE-2017-9435Dolibarr ERP/CRM before 5.0.3 is vulnerable to a SQL injecti…
• CVE-2017-9436TeamPass before 2.1.27.4 is vulnerable to a SQL injection in…
• CVE-2017-9437Openbravo Business Suite 3.0 is affected by SQL injection. T…
• CVE-2017-9438libyara/re.c in the regexp module in YARA 3.5.0 allows remot…
• CVE-2017-9439In ImageMagick 7.0.5-5, a memory leak was found in the funct…
• CVE-2017-9440In ImageMagick 7.0.5-5, a memory leak was found in the funct…