Libiberty
CVE-2016-4490
MEDIUM
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionCVE.org
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths.
AnalysisAI
Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Integer Overflow (CWE-190), which allows attackers to cause unexpected behavior through arithmetic overflow. Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted binary, related to inconsistent use of the long and int types for lengths. Affected products include: Gnu Libiberty.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Validate arithmetic operations, use safe integer libraries, check bounds before allocation.
Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary
The demangler in GNU Libiberty allows remote attackers to cause a denial of service (infinite loop, stack overflow, and
The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentati
The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attack
Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmenta
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c
Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and c
Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/obj
Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service
Same weakness CWE-190 – Integer Overflow or Wraparound
View allSame technique Integer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today