root-project vulnerabilities

Products

• root 2

Latest root-project CVEs

Newest publication first

1. CVE-2026-24812 An improper pointer arithmetic in root-project/root at builtins/zlib/inftrees.c

   Published 2026-01-27

   Critical·CVSS 9.3

   Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inftrees.C. This issue affects root: through 6.36.00-rc1.

2. CVE-2026-24811 An improper pointer arithmetic in root-project/root at builtins/zlib/inffast.c

   Published 2026-01-27

   Critical·CVSS 9.3

   Vulnerability in root-project root (builtins/zlib modules). This vulnerability is associated with program files inffast.C. This issue affects root.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.