Crypto++'s Zinflate class, used by classes like Gunzip and Inflator, could perform an out-of-bounds read when decompressing data (CVE-2017-9434).
{ "section": "core" }