Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5wmw-m5w7-7m5m

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.3

Описание

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

EPSS

Процентиль: 62%
0.00424
Низкий

7.3 High

CVSS3

Дефекты

CWE-120
CWE-787

Связанные уязвимости

CVSS3: 7.3
nvd
около 5 лет назад

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

EPSS

Процентиль: 62%
0.00424
Низкий

7.3 High

CVSS3

Дефекты

CWE-120
CWE-787