diff --git a/lib/zlib/inflate.js b/lib/zlib/inflate.js
index 8d27936..b30262e 100644
--- a/lib/zlib/inflate.js
+++ b/lib/zlib/inflate.js
@@ -469,7 +469,7 @@ const inflate = (strm, flush) => {
         if (state.wbits === 0) {
           state.wbits = len;
         }
-        else if (len > state.wbits) {
+        if (len > 15 || len > state.wbits) {
           strm.msg = 'invalid window size';
           state.mode = BAD;
           break;