davisKing dlib Out-of-Bounds Write Vulnerability in Inflate Function

A classic buffer overflow vulnerability has been identified in the dlib library by davisKing, specifically within the external zlib modules. This out-of-bounds write issue arises in the inflate function, which was cloned from zlib but did not incorporate a crucial security patch. The vulnerability affects dlib versions prior to 19.24.9.

Impact

Exploitation of this vulnerability leads to a buffer overflow, allowing for out-of-bounds writes that could potentially be exploited to execute arbitrary code or cause a crash.

Remediation

Users can upgrade to dlib version 19.24.9 or later to address this vulnerability.