PoC Index

CVE-2018-20673

MEDIUM 5.5EPSS 1.6%

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

CVSS v3.0
5.5 MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CVSS v2.0
4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
1.64% chance of exploitation in the next 30 days, 75th percentile
Published
2019-01-04
Updated
2024-08-05

Proof-of-concept exploits (1)

References

Related