Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mm8j-7g3h-x2mj

Опубликовано: 21 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.

Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.

EPSS

Процентиль: 40%
0.00181
Низкий

7.8 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 6 лет назад

operator new[] sometimes returns pointers to heap blocks which are too small. When a new array is allocated, the C++ run-time has to calculate its size. The product may exceed the maximum value which can be stored in a machine register. This error is ignored, and the truncated value is used for the heap allocation. This may lead to heap overflows and therefore security bugs. (See http://cert.uni-stuttgart.de/advisories/calloc.php for further references.)

redhat
около 23 лет назад

Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.

CVSS3: 7.8
nvd
почти 6 лет назад

Integer overflow in the new[] operator in gcc before 4.8.0 allows attackers to have unspecified impacts.

CVSS3: 7.8
debian
почти 6 лет назад

Integer overflow in the new[] operator in gcc before 4.8.0 allows atta ...

EPSS

Процентиль: 40%
0.00181
Низкий

7.8 High

CVSS3

Дефекты

CWE-190