Lucene search

K
osvGoogleOSV:CVE-2020-17360
HistoryAug 12, 2020 - 6:15 p.m.

CVE-2020-17360

2020-08-1218:15:17
Google
osv.dev
7
vulnerability
integer overflow
boundary checks
out-of-bounds
memory read/write
readytalk avian 1.2.0

AI Score

7

Confidence

High

EPSS

0.001

Percentile

44.0%

An issue was discovered in ReadyTalk Avian 1.2.0. The vm::arrayCopy method defined in classpath-common.h contains multiple boundary checks that are performed to prevent out-of-bounds memory read/write. However, two of these boundary checks contain an integer overflow that leads to a bypass of these checks, and out-of-bounds read/write. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

AI Score

7

Confidence

High

EPSS

0.001

Percentile

44.0%