Guard
Security
CVEs
CVE 2018 25032

HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

AI Security

Prompt injection
MCP security
Supply chain

Resources

Trust packet
Harness setup
Redacted warnings
Safe labs

Product

Install Guard
Pricing
Open dashboard

Guard
Security
CVEs
CVE 2018 25032

HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

AI Security

Prompt injection
MCP security
Supply chain

Resources

Trust packet
Harness setup
Redacted warnings
Safe labs

Product

Install Guard
Pricing
Open dashboard

HOL

Install Pricing Enterprise Affiliates Docs Open App

Docs

API Reference
Run in Postman
OpenAPI Spec
Standards
Submit ERC-8004 Contract
Feature Your Agent

Best Agents

Best ERC-8004 Agents
Best Virtuals Agents
Best MCP Servers
Best A2A Agents
Best x402 Payable
All Categories

Community

Telegram
X

More

Blog
GitHub
Privacy Policy
Terms of Service

Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL

Install Pricing Enterprise Affiliates Docs Open App

Docs

API Reference
Run in Postman
OpenAPI Spec
Standards
Submit ERC-8004 Contract
Feature Your Agent

Best Agents

Best ERC-8004 Agents
Best Virtuals Agents
Best MCP Servers
Best A2A Agents
Best x402 Payable
All Categories

Community

Telegram
X

More

Blog
GitHub
Privacy Policy
Terms of Service

Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

CVE-2018-25032 (CVE-2018-25032) | HOL Guard CVE

Back to active CVEs

High · CVSS 7.5CVE-2018-25032

CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Published Mar 25, 2022Updated Jul 14, 2026Source checked Jul 18, 2026

Upstream Advisory

Key facts

Risk: High · CVSS 7.5
Exploitation: No known exploitation
Affected software: Not mapped
Fix availability: Not reported

Recommended action

Review the upstream advisory, identify the affected product in your inventory, and apply the vendor update when one is available.

What this means

CVE-2018-25032 is listed in the HOL Guard supply-chain feed, but affected software is not mapped to a package. Review the upstream advisory for the affected product and vendor guidance. zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Affected software

Affected software not mapped. Review the upstream record for vendor-specific product and version guidance.

Evidence and references

http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35

Back to active CVEs

High · CVSS 7.5CVE-2018-25032

CVE-2018-25032

zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Published Mar 25, 2022Updated Jul 14, 2026Source checked Jul 18, 2026

Upstream Advisory

Key facts

Risk: High · CVSS 7.5
Exploitation: No known exploitation
Affected software: Not mapped
Fix availability: Not reported

Recommended action

Review the upstream advisory, identify the affected product in your inventory, and apply the vendor update when one is available.

What this means

CVE-2018-25032 is listed in the HOL Guard supply-chain feed, but affected software is not mapped to a package. Review the upstream advisory for the affected product and vendor guidance. zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches.

Affected software

Affected software not mapped. Review the upstream record for vendor-specific product and version guidance.

Evidence and references

http://seclists.org/fulldisclosure/2022/May/33
http://seclists.org/fulldisclosure/2022/May/35

http://seclists.org/fulldisclosure/2022/May/38

http://www.openwall.com/lists/oss-security/2022/03/25/2

http://www.openwall.com/lists/oss-security/2022/03/26/1

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12

https://github.com/madler/zlib/issues/605

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

https://security.gentoo.org/glsa/202210-42

https://security.netapp.com/advisory/ntap-20220526-0009/

https://security.netapp.com/advisory/ntap-20220729-0004/

https://support.apple.com/kb/HT213255

https://support.apple.com/kb/HT213256

https://support.apple.com/kb/HT213257

https://www.debian.org/security/2022/dsa-5111

https://www.openwall.com/lists/oss-security/2022/03/24/1

https://www.openwall.com/lists/oss-security/2022/03/28/1

https://www.openwall.com/lists/oss-security/2022/03/28/3

https://www.oracle.com/security-alerts/cpujul2022.html

http://seclists.org/fulldisclosure/2022/May/33

http://seclists.org/fulldisclosure/2022/May/35

http://seclists.org/fulldisclosure/2022/May/38

http://www.openwall.com/lists/oss-security/2022/03/25/2

http://www.openwall.com/lists/oss-security/2022/03/26/1

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12

https://github.com/madler/zlib/issues/605

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

https://security.gentoo.org/glsa/202210-42

https://security.netapp.com/advisory/ntap-20220526-0009/

https://security.netapp.com/advisory/ntap-20220729-0004/

https://support.apple.com/kb/HT213255

https://support.apple.com/kb/HT213256

https://support.apple.com/kb/HT213257

https://www.debian.org/security/2022/dsa-5111

https://www.openwall.com/lists/oss-security/2022/03/24/1

https://www.openwall.com/lists/oss-security/2022/03/28/1

https://www.openwall.com/lists/oss-security/2022/03/28/3

https://www.oracle.com/security-alerts/cpujul2022.html

https://cert-portal.siemens.com/productcert/html/ssa-333517.html

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

https://cert-portal.siemens.com/productcert/html/ssa-419740.html

https://cert-portal.siemens.com/productcert/html/ssa-470355.html

https://cert-portal.siemens.com/productcert/html/ssa-565386.html

https://cert-portal.siemens.com/productcert/html/ssa-942865.html

Source metadata

Published: Mar 25, 2022
Modified: Jul 14, 2026
Source checked: Jul 18, 2026

Reported by NVD (nvd).

Keep this signal in your Guard workflow.

HOL Guard can help your team monitor supply-chain activity while the upstream record is clarified.

Explore HOL Guard

http://seclists.org/fulldisclosure/2022/May/38

http://www.openwall.com/lists/oss-security/2022/03/25/2

http://www.openwall.com/lists/oss-security/2022/03/26/1

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12

https://github.com/madler/zlib/issues/605

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

https://security.gentoo.org/glsa/202210-42

https://security.netapp.com/advisory/ntap-20220526-0009/

https://security.netapp.com/advisory/ntap-20220729-0004/

https://support.apple.com/kb/HT213255

https://support.apple.com/kb/HT213256

https://support.apple.com/kb/HT213257

https://www.debian.org/security/2022/dsa-5111

https://www.openwall.com/lists/oss-security/2022/03/24/1

https://www.openwall.com/lists/oss-security/2022/03/28/1

https://www.openwall.com/lists/oss-security/2022/03/28/3

https://www.oracle.com/security-alerts/cpujul2022.html

http://seclists.org/fulldisclosure/2022/May/33

http://seclists.org/fulldisclosure/2022/May/35

http://seclists.org/fulldisclosure/2022/May/38

http://www.openwall.com/lists/oss-security/2022/03/25/2

http://www.openwall.com/lists/oss-security/2022/03/26/1

https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf

https://github.com/madler/zlib/commit/5c44459c3b28a9bd3283aaceab7c615f8020c531

https://github.com/madler/zlib/compare/v1.2.11...v1.2.12

https://github.com/madler/zlib/issues/605

https://lists.debian.org/debian-lts-announce/2022/04/msg00000.html

https://lists.debian.org/debian-lts-announce/2022/05/msg00008.html

https://lists.debian.org/debian-lts-announce/2022/09/msg00023.html

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DCZFIJBJTZ7CL5QXBFKTQ22Q26VINRUF/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DF62MVMH3QUGMBDCB3DY2ERQ6EBHTADB/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JZZPTWRYQULAOL3AW7RZJNVZ2UONXCV4/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NS2D2GFPFGOJUL4WQ3DUAY7HF4VWQ77F/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOKNP2L734AEL47NRYGVZIKEFOUBQY5Y/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOKFMSNQ5D5WGMALBNBXU3GE442V74WU/

https://security.gentoo.org/glsa/202210-42

https://security.netapp.com/advisory/ntap-20220526-0009/

https://security.netapp.com/advisory/ntap-20220729-0004/

https://support.apple.com/kb/HT213255

https://support.apple.com/kb/HT213256

https://support.apple.com/kb/HT213257

https://www.debian.org/security/2022/dsa-5111

https://www.openwall.com/lists/oss-security/2022/03/24/1

https://www.openwall.com/lists/oss-security/2022/03/28/1

https://www.openwall.com/lists/oss-security/2022/03/28/3

https://www.oracle.com/security-alerts/cpujul2022.html

https://cert-portal.siemens.com/productcert/html/ssa-333517.html

https://cert-portal.siemens.com/productcert/html/ssa-398330.html

https://cert-portal.siemens.com/productcert/html/ssa-419740.html

https://cert-portal.siemens.com/productcert/html/ssa-470355.html

https://cert-portal.siemens.com/productcert/html/ssa-565386.html

https://cert-portal.siemens.com/productcert/html/ssa-942865.html

Source metadata

Published: Mar 25, 2022
Modified: Jul 14, 2026
Source checked: Jul 18, 2026

Reported by NVD (nvd).

Keep this signal in your Guard workflow.

HOL Guard can help your team monitor supply-chain activity while the upstream record is clarified.

Explore HOL Guard