CVE-2026-3381 - Vulnerability Analysis

Overview

Compress::Raw::Zlib <= 2.219 for Perl contains insecure zlib versions due to outdated bundled zlib library, letting attackers potentially exploit vulnerabilities fixed in zlib 1.3.2, exploit requires vulnerable version usage.

Severity & Score

Impact

Attackers can exploit vulnerabilities in outdated zlib to cause potential memory corruption or denial of service.

Mitigation

Update to version 2.220 or later which includes zlib 1.3.2.

References

• https://7asecurity.com/blog/2026/02/zlib-7asecurity-audit/
• https://github.com/madler/zlib
• https://github.com/madler/zlib/releases/tag/v1.3.2
• https://metacpan.org/release/PMQS/Compress-Raw-Zlib-2.221/source/Changes
• https://www.cve.org/CVERecord?id=CVE-2026-27171
• https://www.zlib.net/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner