CVE-2012-2675 Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform m...
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nedprod nedmalloc | <= 1.10 | No fix listed |
References
- kqueue.org
- [oss-security] 20120605 memory allocator upstream patches mailing-list
- [oss-security] 20120607 Re: memory allocator upstream patches mailing-list
- github.com
- github.com exploit patch
- github.com exploit patch