{"id":"CVE-2018-12913","details":"In Miniz 2.0.7, tinfl_decompress in miniz_tinfl.c has an infinite loop because sym2 and counter can both remain equal to zero.","modified":"2026-07-08T14:14:18.871884Z","published":"2018-06-27T18:29:00.257Z","references":[{"type":"EVIDENCE","url":"https://github.com/richgel999/miniz/issues/90"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/richgel999/miniz","events":[{"introduced":"36b6c99f622a61b7f97d0238461d4d723aa1322b"},{"last_affected":"36b6c99f622a61b7f97d0238461d4d723aa1322b"}],"database_specific":{"extracted_events":[{"introduced":"2.0.7"},{"last_affected":"2.0.7"}],"source":"CPE_STRING","cpe":"cpe:2.3:a:miniz_project:miniz:2.0.7:*:*:*:*:*:*:*"}}],"versions":["2.0.7"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12913.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}