debian/libgc vulnerabilities

Latest debian/libgc CVEs

Newest publication first

1. DLA-2966-1 libgc - security update

   Published 2022-03-30

   Unknown

2. CVE-2016-9427 Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocati...

   Published 2016-12-12

   Critical·CVSS 9.8 EPSS 4.1%

   Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.

3. DLA-721-1 libgc - security update

   Published 2016-11-25

   Unknown

4. CVE-2012-2673 Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) befo...

   Published 2012-07-25

   Medium·CVSS 5.0 EPSS 2.8%

   Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.