Gzip

Vendor:

First CVE: Nov 18, 2001 · Active for 24 years

13

Total CVEs

More Total CVEs than 91% of tracked products

1.9

Avg CVEs / Year

Higher CVE frequency than 60% of tracked products

5.5

Avg CVSS

Higher Avg CVSS than 15% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Gzip over time

Volume of CVEsAvg CVSS Base Score

First CVE

Nov 18, 2001

24 years ago

Most Recent CVE

Jun 29, 2026

25 days ago

CVE Severity & Scoring

Gzip13 CVEs

31%

38%

31%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local1 (7.7%)

Network2 (15.4%)

Unknown10 (76.9%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low2 (15.4%)

High1 (7.7%)

Unknown10 (76.9%)

User Interaction

None3 (23.1%)

Unknown10 (76.9%)

Required0 (0.0%)

Privileges Required

Low2 (15.4%)

High0 (0.0%)

None1 (7.7%)

Unknown10 (76.9%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2026-41992HIGH GNU gzip contains a global buffer overflow vulnerability in the LZH decompression logic caused by improper reuse of shared global state between different decompression formats with	Jun 29, 2026	7.5	33	NO	NO
CVE-2022-1271HIGH An arbitrary file write vulnerability was found in GNU gzip's zgrep utility. When zgrep is applied on the attacker's chosen file name (for example, a crafted file name), this can o	Aug 31, 2022	8.8	30	NO	NO
CVE-2026-41991MEDIUM GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back to	Jun 29, 2026	4.7	27	NO	NO
CVE-2004-0603HIGH gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to	Dec 6, 2004	10.0	25	NO	NO
CVE-2010-0001MEDIUM Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of se	Jan 29, 2010	6.8	24	NO	NO
CVE-2009-2624MEDIUM The huft_build function in inflate.c in gzip before 1.3.13 creates a hufts (aka huffman) table that is too small, which allows remote attackers to cause a denial of service (applic	Jan 29, 2010	6.8	24	NO	NO
CVE-2001-1228HIGH Buffer overflows in gzip 1.3x, 1.2.4, and other versions might allow attackers to execute code via a long file name, possibly remotely if gzip is run on an FTP server.	Nov 18, 2001	7.5	20	NO	NO
CVE-2005-1228MEDIUM Directory traversal vulnerability in gunzip -N in gzip 1.2.4 through 1.3.5 allows remote attackers to write to arbitrary directories via a .. (dot dot) in the original filename wit	May 2, 2005	5.0	16	NO	NO
CVE-2005-0758MEDIUM zgrep in gzip before 1.3.5 does not properly sanitize arguments, which allows local users to execute arbitrary commands via filenames that are injected into a sed script.	May 13, 2005	4.6	14	NO	NO
CVE-2005-0988LOW Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file wh	May 2, 2005	3.7	13	NO	NO

View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Gzip

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
1.3.9	2	6.8	4.5%
1.3.8	2	6.8	4.5%
1.3.7	2	6.8	4.5%
1.3.6	2	6.8	4.5%
1.3.5	2	6.8	4.5%
1.3.4	2	6.8	4.5%
1.3.3	4	5.6	3.3%
1.3.2	2	6.8	4.5%
1.3.12	1	6.8	4.8%
1.3.11	2	6.8	4.5%
1.3.10	2	6.8	4.5%
1.3.1	2	6.8	4.5%
1.3	3	7.0	4.0%
1.2.4a	5	5.4	2.6%
1.2.4	5	6.0	3.3%