GNU Multiple Precision Arithmetic Library (GMP) through 6.2.1 has an mpz/inp_raw.c integer overflow and resultant buffer overflow via crafted input leading to a segmentation fault on 32-bit platforms.

🗓️ 19 Nov 2021 08:00:00Reported by MicrosoftType

GNU Multiple Precision Arithmetic Library up to 6.2.1 has mpz/inp_raw.c overflow causing segfault on 32-bit.

Reporter	Title	Published	Views	Family All 139
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak	7 Jun 202501:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities	27 Feb 202509:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to Integer Overflow or Wraparound in the RHEL UBI (CVE-2021-43618)	27 Jun 202519:53	–	ibm
Tenable Nessus	Amazon Linux 2022 : gmp, gmp-c++, gmp-devel (ALAS2022-2022-177)	5 Nov 202200:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : gmp, gmp-c++, gmp-devel (ALAS2023-2023-033)	21 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : gmp (ALAS-2023-2369)	4 Dec 202300:00	–	nessus
Tenable Nessus	Alibaba Cloud Linux 3 : 0052: gmp (ALINUX3-SA-2024:0052)	14 May 202500:00	–	nessus
Tenable Nessus	CentOS 8 : gmp (CESA-2024:3214)	22 May 202400:00	–	nessus
Tenable Nessus	CentOS 9 : gmp-6.2.0-11.el9	29 Feb 202400:00	–	nessus