Skip to content
OpenAdvisories
High · 7.3 CVE-2020-28895 EUVD-2020-21286GHSA-5wmw-m5w7-7m5m

integer overflow in calloc

Published Feb 3, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

Advisories 6

References