{"id":"CVE-2017-9434","details":"Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability in zinflate.cpp in the Inflator filter.","modified":"2026-07-08T14:13:08.376229Z","published":"2017-06-05T14:29:00.653Z","references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/99007"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7IL5A6465IEPW5GAWGXB2ENJPFYVWTJM/"},{"type":"ADVISORY","url":"http://openwall.com/lists/oss-security/2017/06/06/2"},{"type":"ADVISORY","url":"https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965"},{"type":"ADVISORY","url":"https://github.com/weidai11/cryptopp/issues/414"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/weidai11/cryptopp","events":[{"introduced":"0"},{"last_affected":"4132d85888ac6c30729f58bb442a4a26a5b16cfe"},{"fixed":"07dbcc3d9644b18e05c1776db2a57fe04d780965"}],"database_specific":{"cpe":"cpe:2.3:a:cryptopp:crypto\\+\\+:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"5.6.4"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["CRYPTOPP_5_6_2","CRYPTOPP_5_6_5","CRYPTOPP_5_6_4","CRYPTOPP_5_6_3","CRYPTOPP_5_6_1","CRYPTOPP_5_6_0","CRYPTOPP_5_5_2","CRYPTOPP_5_5_1","CRYPTOPP_5_5","CRYPTOPP_5_4","CRYPTOPP_5_3_0","CRYPTOPP_5_2_3","CRYPTOPP_5_2_1","CRYPTOPP_5_2","CRYPTOPP_5_1","CRYPTOPP_5_0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9434.json","vanir_signatures_modified":"2026-07-08T14:13:08Z","vanir_signatures":[{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["323341517884488183653666169007488451936","18807198084437282500699865652986597853","271337482082004636032467579005783446289","199463794754856889060787093126361670511","323205425386168729751449483174916946422","282228558392070175838252057636277670986","67516902316290556401473077345567600368","165199630192163806682780639880309730320","190020492044586742996552118139701788681"]},"id":"CVE-2017-9434-28380511","signature_type":"Line","signature_version":"v1","source":"https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965","target":{"file":"zinflate.cpp"}},{"digest":{"function_hash":"224710083941258206766041306720462428127","length":2730},"id":"CVE-2017-9434-3d0289ff","signature_type":"Function","signature_version":"v1","source":"https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965","target":{"file":"zinflate.cpp","function":"Inflator::DecodeBody"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965","target":{"file":"validat1.cpp"},"deprecated":false,"digest":{"line_hashes":["249637426410913553307899980395848882793","329500962857133682578485821907882393858","298132730797582947482336732380942241743","323207193060896166341370851782737195099","249637426410913553307899980395848882793","329500962857133682578485821907882393858","258489400407140021366390839805057123061","216410620710447591910733204737455648490","249637426410913553307899980395848882793","63659219966971893950624419224505701163","327894723209560475615694736135000828857","151571117920949179632904206003017152112"],"threshold":0.9},"id":"CVE-2017-9434-79e671bc","signature_type":"Line"},{"id":"CVE-2017-9434-9b241454","signature_type":"Line","signature_version":"v1","source":"https://github.com/weidai11/cryptopp/commit/07dbcc3d9644b18e05c1776db2a57fe04d780965","target":{"file":"zinflate.h"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["113853016433871770855861407042660788897","132476829677205468460856921357404450958","281574212875578897132862701503511855224","163051097516836965264523934254694538290","49353237374441228769163090863383320557","276257761445143197300323566812437619864"]}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}]}