CVE-2018-20673

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create…

published January 4, 2019

CVSS
—
EPSS
2%
Percentile
76.1
In the wild
Unconfirmed
What it is

The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create an array for saving the template argument values") that can trigger a heap-based buffer overflow, as demonstrated by nm.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01637 · 76.1th percentile
Published
2019-01-04T17:00Z
EPSS history
Timeline
  • 04 JAN 17:00Z
    The demangle_template function in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.31.1, contains an integer overflow vulnerability (for "Create…
    cvelistv5