CVE-2002-0059 Use after free in n/a

What is CVE-2002-0059?

CVE-2002-0059 is a critical use after free vulnerability in n/a, published on 25 Jun 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The decompression algorithm in zlib 1.1.3 and earlier, as used in many different utilities and packages, causes inflateEnd to release certain memory more than once (a "double free"), which may allow local and remote attackers to execute arbitrary code via a block of malformed compression data.

Weakness: CWE-415

Which versions are affected by CVE-2002-0059?

It affects 1 product.

Products include Zlib Zlib.

How do I fix CVE-2002-0059?

No fix has been published for CVE-2002-0059 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.

Is CVE-2002-0059 being exploited?

There is no known exploitation of CVE-2002-0059 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2005-2096 Memory corruption in n/a High 7.5
• CVE-2003-0107 Memory corruption in n/a High 7.5
• CVE-2005-1849 Denial of service in n/a Medium 5.0
• CVE-2026-22184 zlib <= 1.3.1.2 untgz Global Buffer Overflow in TGZfname() Medium 4.6
• CVE-2026-27171 Denial of service in zlib Low 2.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-8894-p74v-5485.