Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v898-xg3c-w4rj

Опубликовано: 20 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

EPSS

Процентиль: 40%
0.00502
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122
CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
3 месяца назад

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

CVSS3: 5
redhat
3 месяца назад

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

CVSS3: 9.8
nvd
3 месяца назад

Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.

msrc
3 месяца назад

scanf %mc off-by-one heap buffer overflow

CVSS3: 9.8
debian
3 месяца назад

Calling the scanf family of functions with a %mc (malloc'd character m ...

EPSS

Процентиль: 40%
0.00502
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-122
CWE-787