Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2012-2675 Details

Description

Multiple integer overflows in the (1) CallMalloc (malloc) and (2) nedpcalloc (calloc) functions in nedmalloc (nedmalloc.c) before 1.10 beta2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/ CVE
https://github.com/ned14/nedmalloc/blob/master/Readme.html CVE
https://github.com/ned14/nedmalloc/commit/1a759756639ab7543b650a10c2d77a0ffc7a2000 CVEExploitPatch
https://github.com/ned14/nedmalloc/commit/2965eca30c408c13473c4146a9d47d547d288db1 CVEExploitPatch
http://www.openwall.com/lists/oss-security/2012/06/05/1 CVE

see all 12 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-189Numeric Errors[email protected]

Affected Products

ProductVersions
nedprod nedmalloc
<= 1.10

CPE

  • cpe:2.3:a:nedprod:nedmalloc:*:beta1:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

5 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2012-2675
NVD Published Date:
Jul 25, 2012
NVD Last Modified:
Jun 16, 2026
Source:
[email protected]
CVE-2012-2675 Details - Not Deferred