CVE & Exploit Intelligence Database

CVE-2016-4493 5.5 MEDIUM EPSS 0.00

The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denial of service (out-of-bounds read and crash) via a crafted binary.

CWE-125 Feb 24, 2017

CVE-2016-4492 4.4 MEDIUM EPSS 0.00

Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary.

CWE-119 Feb 24, 2017

CVE-2016-4491 5.5 MEDIUM EPSS 0.01

The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, which triggers infinite recursion and a buffer overflow, related to a node having "itself as ancestor more than once."

CWE-119 Feb 24, 2017

CVE-2016-4490 5.5 MEDIUM EPSS 0.01

Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.

CWE-190 Feb 24, 2017

CVE-2016-4489 5.5 MEDIUM EPSS 0.00

Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to the "demangling of virtual tables."

CWE-190 Feb 24, 2017

CVE-2016-4488 5.5 MEDIUM EPSS 0.00

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "ktypevec."

CWE-416 Feb 24, 2017

CVE-2016-4487 5.5 MEDIUM EPSS 0.00

Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to "btypevec."

CWE-416 Feb 24, 2017

CVE-2016-2226 7.8 HIGH 1 PoC Analysis EPSS 0.09

Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted executable, which triggers a buffer overflow.

CWE-119 Feb 24, 2017

CVE-2016-6131 7.5 HIGH EPSS 0.02

The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and crash) via a cycle in the references of remembered mangled types.

CWE-20 Feb 07, 2017

CVE-2012-3509 EPSS 0.02

Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libiberty, as used by binutils 2.22, allow remote attackers to cause a denial of service (crash) via vectors related to the "addition of CHUNK_HEADER_SIZE to the length," which triggers a heap-based buffer overflow.

CWE-189 Sep 05, 2012