CVE-2009-0607 Integer overflow in n/a

High 7.2 Published 17 Feb 2009 Updated 7 Aug 2024

Integer overflows in Android Bionic malloc functions have unknown impact and attack vectors, requiring further investigation for potential memory corruption risks.

Exploited in the wild: Not known
Login needed: Not stated
Attackable: Not stated
Victim action needed: Not stated
Fix: None listed

What is CVE-2009-0607?

CVE-2009-0607 is a high-severity vulnerability in n/a, published on 17 Feb 2009.

Official description

Multiple integer overflows in malloc_leak.c in Bionic in Open Handset Alliance Android 1.0 have unknown impact and attack vectors, related to the (1) chk_calloc and (2) leak_calloc functions.

Weakness: CWE-189

Which versions are affected by CVE-2009-0607?

It affects 1 product.

Products include Openhandsetalliance Android Sdk.

How do I fix CVE-2009-0607?

No fix has been published for CVE-2009-0607 yet. Limit exposure of the affected software until one is available.

Is CVE-2009-0607 being exploited?

There is no known exploitation of CVE-2009-0607 in the wild and no public exploit code.

CVE-2009-0606 Privilege escalation in n/a High 7.2

Sources

Also known as GHSA-cv5g-5rc7-m952.