已开启
[security] CVE-2026-27171: crc32_combine CPU consumption — backport to ArkUI-X-7.0-Release #239
wu-jinpeng981212创建于 12 天前
wu-jinpeng98121212 天前 关联了pull request：fix: CVE-2026-27171 crc32_combine CPU consumption (backport of zlib 1.3.2 fix) [ArkUI-X-7.0-Release]
12 天前 关联了pull request：fix: CVE-2026-27171 crc32_combine CPU consumption (backport of zlib 1.3.2 fix) [ArkUI-X-7.0-Release]
openharmony_ci
12 天前 评论：
12 天前 评论：
感谢提交Issue！关于Issue的交互操作，请访问OpenHarmony社区支持命令清单。如果有问题，请联系 [@wang19954](https://gitcode.com/wang19954) [@wanghang904](https://gitcode.com/wanghang904) [@hanfeng6](https://gitcode.com/hanfeng6) [@hustautumn2025](https://gitcode.com/hustautumn2025) 。如果需要调整订阅PR、Issue的变更状态，请访问链接。
Thanks for submitting the issue. For more commands, please visit OpenHarmony Command List. If you have any questions, please refer to committer gitcode for help. If you need to change the subscription of a Pull Request or Issue, please visit the link.
12 天前 添加了label：waiting_for_assign
Tracking issue for the CVE-2026-27171 backport PR on this branch.
Vendored zlib 1.3.1 is in the NVD range (fixed 1.3.2); crc32.c is compiled into libz (BUILD.gn), so the vulnerable crc32_combine64/crc32_combine_gen64 → x2nmodp path ships in the product.
(generated by ohos-cve-autofix)