CVE-2021-27419 — uClibc-ng Integer Overflow or Wraparound

CVE-2021-27419

uClibc-ng Integer Overflow or Wraparound PUBLISHED

Description (CNA)

uClibc-ng versions prior to 1.0.37 are vulnerable to integer wrap-around in functions malloc-simple. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.

Affected (CNA)

Vendor / product	Versions
uClibc-ng / uClibc-ng	affected unspecified before 1.0.37

CWE

CWE-190

References

https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
https://downloads.uclibc-ng.org/releases/

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04
https://downloads.uclibc-ng.org/releases/

CISA-ADP

No English description supplied.

No references supplied.