CVE-2016-7544

2017-01-3021:59:01

Google

osv.dev

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.3%

JSON

Crypto++ 5.6.4 incorrectly uses Microsoft’s stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.

CPENameOperatorVersion
cryptoppeqCRYPTOPP_5_6_4
cryptoppeqCRYPTOPP_5_2
cryptoppeqCRYPTOPP_5_3_0
cryptoppeqCRYPTOPP_5_6_2
cryptoppeqCRYPTOPP_5_5_2
cryptoppeqCRYPTOPP_5_5_1
cryptoppeqCRYPTOPP_5_2_3
cryptoppeqCRYPTOPP_5_6_0
cryptoppeqCRYPTOPP_5_1
cryptoppeqCRYPTOPP_5_2_1

Name	Operator	Version
cryptopp	eq	CRYPTOPP_5_6_4
cryptopp	eq	CRYPTOPP_5_2
cryptopp	eq	CRYPTOPP_5_3_0
cryptopp	eq	CRYPTOPP_5_6_2
cryptopp	eq	CRYPTOPP_5_5_2
cryptopp	eq	CRYPTOPP_5_5_1
cryptopp	eq	CRYPTOPP_5_2_3
cryptopp	eq	CRYPTOPP_5_6_0
cryptopp	eq	CRYPTOPP_5_1
cryptopp	eq	CRYPTOPP_5_2_1