CVE-2018-25032: apple mac_os_x Out-of-bounds Write

Modified

AliasesALPINE-CVE-2018-25032MGASA-2022-0124SUSE-SU-2022:1023-1+40 more

Published 25-03-2022Last modified 14-10-2026

Vulnerability summary

CVE-2018-25032 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in apple mac_os_x. EPSS estimates a 51.73% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities. 2 public exploits are recorded.

Priority

Prioritisepublic exploit

Public exploit (reference, Date unknown)

Source freshness unavailable

How is this decided?

CVSS score

7.5/10

010

High · v3.1 (CVE.org)

EPSS score

51.73%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 17 · Related 16

MGASA-2022-0314 OPENSUSE-SU-2022:10126-1 OPENSUSE-SU-2024:11999-1 OPENSUSE-SU-2024:12360-1 OPENSUSE-SU-2024:13165-1 OPENSUSE-SU-2024:14174-1+13 more

Timeline

25-03-2022
PublishedVulnerability first disclosed.
14-10-2026
Last modifiedVulnerability information updated.

Description

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

CVSS metrics

10 scores · 9 sources · 2 versions

v3.17.5v2.05.0

EPSS trend

Probability

51.73%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

No change 0.00 pp

From 51.73% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

2 found

referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown
referenceUnverified
Exploit Reference (openwall.com)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Suse41 products

zlib&distro=HPE Helion OpenStack 8< 1.2.8-12.6.1
zlib&distro=SUSE Enterprise Storage 6< 1.2.11-150000.3.30.1
zlib&distro=SUSE Enterprise Storage 7< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 1.2.11-150000.3.30.1

zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise High Performance Computing 15-ESPOS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise High Performance Computing 15-LTSS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Micro 5.0< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Micro 5.1< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Micro 5.2< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Module for Basesystem 15 SP3< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Point of Sale 11 SP3< 1.2.7-0.17.3.1
zlib&distro=SUSE Linux Enterprise Real Time 15 SP2< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server 11 SP4-LTSS< 1.2.7-0.17.3.1
zlib&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 1.2.8-12.6.1
zlib&distro=SUSE Linux Enterprise Server 12 SP3-BCL< 1.2.8-12.6.1
zlib&distro=SUSE Linux Enterprise Server 12 SP3-LTSS< 1.2.8-12.6.1
zlib&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 1.2.11-3.6.1
zlib&distro=SUSE Linux Enterprise Server 12 SP5< 1.2.11-11.19.1
zlib&distro=SUSE Linux Enterprise Server 15 SP1-BCL< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server 15 SP1-LTSS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server 15 SP2-BCL< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server 15 SP2-LTSS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server 15-LTSS< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP3< 1.2.8-12.6.1
zlib&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4< 1.2.11-3.6.1
zlib&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP5< 1.2.11-11.19.1
zlib&distro=SUSE Linux Enterprise Server for SAP Applications 15< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP1< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2< 1.2.11-150000.3.30.1
zlib&distro=SUSE Linux Enterprise Software Development Kit 12 SP5< 1.2.11-11.19.1
zlib&distro=SUSE Manager Proxy 4.1< 1.2.11-150000.3.30.1
zlib&distro=SUSE Manager Retail Branch Server 4.1< 1.2.11-150000.3.30.1
zlib&distro=SUSE Manager Server 4.1< 1.2.11-150000.3.30.1
zlib&distro=SUSE OpenStack Cloud 8< 1.2.8-12.6.1
zlib&distro=SUSE OpenStack Cloud 9< 1.2.11-3.6.1
zlib&distro=SUSE OpenStack Cloud Crowbar 8< 1.2.8-12.6.1
zlib&distro=SUSE OpenStack Cloud Crowbar 9< 1.2.11-3.6.1

Show all 41

Redhat19 products

mingw-zlib< 0:1.2.8-10.el8 | < 0:1.2.12-2.el9
mingw32-zlib< 0:1.2.8-10.el8 | < 0:1.2.12-2.el9
mingw32-zlib-debuginfo< 0:1.2.8-10.el8 | < 0:1.2.12-2.el9
mingw32-zlib-static< 0:1.2.8-10.el8 | < 0:1.2.12-2.el9
mingw64-zlib< 0:1.2.8-10.el8 | < 0:1.2.12-2.el9

Show all 19

Netapp11 products

active_iq_unified_managerna
e-series_santricity_os_controller≥ 11.0.0, ≤ 11.70.2
h300s_firmwarena
h410c_firmwarena
h410s_firmwarena

Show all 11

Siemens6 products

Show all 6

Opensuse5 products

freetype2&distro=openSUSE Tumbleweed< 2.12.1-1.1
ghostscript&distro=openSUSE Tumbleweed< 10.02.1-1.1
mupdf&distro=openSUSE Tumbleweed< 1.19.1-1.1
python39&distro=openSUSE Tumbleweed< 3.9.13-1.1
zlib&distro=openSUSE Leap 15.3< 1.2.11-150000.3.30.1

Ubuntu5 products

klibc< 2.0.3-0ubuntu1.14.04.3+esm3 | < 2.0.4-8ubuntu1.16.04.4+esm2 | < 2.0.4-9ubuntu2.2+esm1 | < 2.0.7-1ubuntu5.2 | < 2.0.10-4ubuntu0.1 | < 2.0.13-4ubuntu0.1
mariadb-10.3< 1:10.3.37-0ubuntu0.20.04.1
mariadb-10.6< 1:10.6.11-0ubuntu0.22.04.1
rsync< 3.1.2-2.1ubuntu1.4 | < 3.1.3-8ubuntu0.3 | < 3.1.1-3ubuntu1.3+esm1
zlib< 1:1.2.11.dfsg-2ubuntu9 | < 1:1.2.11.dfsg-0ubuntu2.1 | < 1:1.2.11.dfsg-2ubuntu1.3 | < 1:1.2.8.dfsg-1ubuntu1.1+esm1 | < 1:1.2.8.dfsg-2ubuntu4.3+esm1

Alpine3 products

mariadb≥ 10.3.0, < 10.5.17-r0 | ≥ 10.3.0, < 10.6.9-r0
minizip< 1.2.12-r0
zlib≥ 1.2.2.2, < 1.2.12-r0 | ≥ 1.2.2.2, < 1.2.11-r4

Debian3 products

libz-mingw-w64< 1.2.11+dfsg-1+deb9u1 | < 1.2.11+dfsg-5
zlib< 1:1.2.11.dfsg-1+deb10u1 | < 1:1.2.11.dfsg-2+deb11u1 | < 1:1.2.8.dfsg-5+deb9u1 | < 1:1.2.11.dfsg-4
debian_linuxEOL9.0 | 10.0 | 11.0

Apple2 products

mac_os_x≥ 10.15, < 10.15.7 | 10.15.7 | 10.15.7:security_update_2020 | 10.15.7:security_update_2020-001 | 10.15.7:security_update_2020-005 | 10.15.7:security_update_2020-007 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-006 | 10.15.7:security_update_2021-007 | 10.15.7:security_update_2021-008 | 10.15.7:security_update_2022-001 | 10.15.7:security_update_2022-002 | 10.15.7:security_update_2022-003
macos≥ 11.0, < 11.6.6 | ≥ 12.0.0, < 12.4

Azul1 product

zuluEOL6.45 | 7.52 | 8.60 | 11.54 | 13.46 | 15.38 | 17.32

Chainguard1 product

zlib< 1.2.13-r1

Fedoraproject1 product

fedoraEOL34 | 35 | 36

Goto1 product

gotoassist< 11.9.18

Mageia1 product

zlib< 1.2.12-1.mga8

Mariadb1 product

mariadb≥ 10.3.0, < 10.3.36 | ≥ 10.4.0, < 10.4.26 | ≥ 10.5.0, < 10.5.17 | ≥ 10.6.0, < 10.6.9 | ≥ 10.7.0, < 10.7.5 | ≥ 10.8.0, < 10.8.4 | ≥ 10.9.0, < 10.9.2

Nokogiri1 product

nokogiri< 1.13.4

Python1 product

python≥ 3.7.0, < 3.7.14 | ≥ 3.8.0, < 3.8.14 | ≥ 3.9.0, < 3.9.13 | ≥ 3.10.0, < 3.10.5

RubyGems1 product

nokogiri< 1.13.4

Wolfi1 product

zlib< 1.2.13-r1

Zlib1 product

zlib≥ 1.2.2.2, < 1.2.12

20 vendors · 106 products

References

109 links

www.openwall.com/lists/oss-security/2022/03/24/1Mailing ListThird Party AdvisoryWEBREPORTAdvisory
github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531PatchThird Party AdvisoryFIXWEB
www.openwall.com/lists/oss-security/2022/03/25/2Mailing ListThird Party AdvisoryAdvisoryWEB
www.openwall.com/lists/oss-security/2022/03/26/1Mailing ListExploitThird Party AdvisoryEVIDENCEWEB
www.debian.org/security/2022/dsa-5111Vendor AdvisoryPatchThird Party AdvisoryFIXWEB
lists.debian.org/debian-lts-announce/2022/04/msg00000.htmlMailing ListThird Party AdvisoryAdvisoryWEB
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party AdvisoryAdvisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party AdvisoryAdvisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party AdvisoryAdvisory
lists.debian.org/debian-lts-announce/2022/05/msg00008.htmlMailing ListThird Party AdvisoryAdvisoryWEB

Show all 100 references

seclists.org/fulldisclosure/2022/May/33Mailing ListThird Party AdvisoryAdvisoryWEB
seclists.org/fulldisclosure/2022/May/35Mailing ListThird Party AdvisoryAdvisoryWEB
seclists.org/fulldisclosure/2022/May/38Mailing ListThird Party AdvisoryAdvisoryWEB
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party AdvisoryAdvisory
www.oracle.com/security-alerts/cpujul2022.htmlPatchThird Party AdvisoryFIXWEB
www.openwall.com/lists/oss-security/2022/03/28/3Mailing ListThird Party AdvisoryAdvisoryWEB
www.openwall.com/lists/oss-security/2022/03/28/1ExploitMailing ListThird Party AdvisoryEVIDENCEWEB
github.com/madler/zlib/compare/v1.2.11...v1.2.12PatchThird Party AdvisoryFIXWEB
github.com/madler/zlib/issues/605Issue TrackingPatchThird Party AdvisoryREPORTFIXWEB
support.apple.com/kb/HT213257Third Party AdvisoryAdvisoryWEB
support.apple.com/kb/HT213256Third Party AdvisoryAdvisoryWEB
support.apple.com/kb/HT213255Third Party AdvisoryAdvisoryWEB
security.netapp.com/advisory/ntap-20220526-0009/Third Party AdvisoryAdvisory
security.netapp.com/advisory/ntap-20220729-0004/Third Party AdvisoryAdvisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party AdvisoryAdvisory
lists.fedoraproject.org/archives/…Vendor AdvisoryThird Party AdvisoryAdvisory
lists.debian.org/debian-lts-announce/2022/09/msg00023.htmlMailing ListThird Party AdvisoryAdvisoryWEB
security.gentoo.org/glsa/202210-42Vendor AdvisoryThird Party AdvisoryAdvisoryWEB
cert-portal.siemens.com/productcert/pdf/ssa-333517.pdfThird Party AdvisoryAdvisoryWEB
cert-portal.siemens.com/productcert/html/ssa-333517.htmlWEB
cert-portal.siemens.com/productcert/html/ssa-419740.htmlWEB
cert-portal.siemens.com/productcert/html/ssa-565386.htmlWEB
cert-portal.siemens.com/productcert/html/ssa-942865.htmlWEB
cert-portal.siemens.com/productcert/html/ssa-398330.htmlWEB
cert-portal.siemens.com/productcert/html/ssa-470355.htmlWEB
security.alpinelinux.org/vuln/CVE-2018-25032Advisory
advisories.mageia.org/MGASA-2022-0124.htmlAdvisory
bugs.mageia.org/show_bug.cgi?id=30204REPORT
www.openwall.com/lists/oss-security/2022/03/25/2WEB
www.zlib.net/ChangeLog.txtWEB
www.suse.com/support/update/announcement/2022/suse-su-20221023-1/Advisory
bugzilla.suse.com/1197459REPORT
www.suse.com/security/cve/CVE-2018-25032WEB
www.suse.com/support/update/announcement/2022/suse-su-20221043-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20221061-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20221061-2/Advisory
www.suse.com/support/update/announcement/2022/suse-su-20221062-1/Advisory
www.suse.com/support/update/announcement/2022/suse-su-202214929-1/Advisory
access.redhat.com/errata/RHSA-2022:1591Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2067945REPORT
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1591.jsonAdvisory
access.redhat.com/security/cve/CVE-2018-25032REPORT
www.cve.org/CVERecord?id=CVE-2018-25032AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2018-25032AdvisoryOval
access.redhat.com/errata/RHSA-2022:1642Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1642.jsonAdvisory
access.redhat.com/errata/RHSA-2022:1661Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1661.jsonAdvisory
access.redhat.com/errata/RHSA-2022:2192Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2192.jsonAdvisory
access.redhat.com/errata/RHSA-2022:2197Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2197.jsonAdvisory
access.redhat.com/errata/RHSA-2022:2198Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2198.jsonAdvisory
access.redhat.com/errata/RHSA-2022:2201Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2201.jsonAdvisory
access.redhat.com/errata/RHSA-2022:2213Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2213.jsonAdvisory
access.redhat.com/errata/RHSA-2022:2214Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_2214.jsonAdvisory
access.redhat.com/errata/RHSA-2022:4584Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4584.jsonAdvisory
access.redhat.com/errata/RHSA-2022:4592Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4592.jsonAdvisory
access.redhat.com/errata/RHSA-2022:4845Advisory
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_4845.jsonAdvisory
access.redhat.com/errata/RHSA-2022:7813Advisory
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.7_release_notes/indexARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7813.jsonAdvisory
access.redhat.com/errata/RHSA-2022:8420Advisory
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.1_release_notes/indexARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8420.jsonAdvisory
access.redhat.com/errata/RHSA-2023:0943Advisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0943.jsonAdvisory
access.redhat.com/errata/RHSA-2023:0975Advisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0975.jsonAdvisory
access.redhat.com/errata/RHSA-2023:0976Advisory
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0976.jsonAdvisory
ubuntu.com/security/CVE-2018-25032REPORT
ubuntu.com/security/notices/USN-5355-1Advisory
ubuntu.com/security/notices/USN-5355-2Advisory
ubuntu.com/security/notices/USN-5359-1Advisory
ubuntu.com/security/notices/USN-5359-2Advisory
ubuntu.com/security/notices/USN-5739-1Advisory
ubuntu.com/security/notices/USN-6736-1Advisory
ubuntu.com/security/notices/USN-6736-2Advisory
security-tracker.debian.org/tracker/CVE-2018-25032Advisory
lists.opensuse.org/archives/…Advisory
github.com/sparklemotion/nokogiri/security/advisories/GHSA-v6gp-9mmm-c6p5WEB

Showing 100 of 109.