CVE-2012-2675 Integer overflow in n/a
Integer overflows in nedmalloc allow attackers to trigger buffer overflows via large size values, potentially leading to code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is CVE-2012-2675?
CVE-2012-2675 is a medium-severity vulnerability in n/a, published on 25 Jul 2012.
Official description
Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.
Weakness: CWE-189
Which versions are affected by CVE-2012-2675?
It affects 1 product.
Products include Nedprod Nedmalloc.
How do I fix CVE-2012-2675?
No fix has been published for CVE-2012-2675 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-2675 being exploited?
There is no known exploitation of CVE-2012-2675 in the wild and no public exploit code.
Sources
Also known as GHSA-2whv-w9wx-38wp.