heap-exploits-101

Heap Exploits 101 — From 0 to Hero A complete, self-contain...

EUVD-2005-4886

Malware in sbrugna...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

tcmalloc:span_fuzz: Segv on unknown address with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=6375963914993664 Project: tcmalloc Fuzzing Engine: libFuzzer Fuzz Target: spanfuzz Job Type: libfuzzerasantcmalloc Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: NULL Sanitizer: address ASAN Crash Revision:...

tcmalloc:profile_builder_fuzz: Heap-buffer-overflow with empty stacktrace

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5163788782141440 Project: tcmalloc Fuzzing Engine: libFuzzer Fuzz Target: profilebuilderfuzz Job Type: libfuzzerasantcmalloc Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

tcmalloc:profile_builder_fuzz: Use-after-poison in absl::BytesToHexString

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5125212023422976 Project: tcmalloc Fuzzing Engine: afl Fuzz Target: profilebuilderfuzz Job Type: aflasantcmalloc Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address: 0x730e8fcfd220...

tcmalloc:huge_page_filler_fuzz: Invalid-free with empty stacktrace

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=6160549610389504 Project: tcmalloc Fuzzing Engine: libFuzzer Fuzz Target: hugepagefillerfuzz Job Type: libfuzzerasantcmalloc Platform Id: linux Crash Type: Invalid-free Crash Address: 0x7ffd03c390e0...

tcmalloc:profile_builder_fuzz: Use-after-poison in absl::BytesToHexString

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5100807425490944 Project: tcmalloc Fuzzing Engine: honggfuzz Fuzz Target: profilebuilderfuzz Job Type: honggfuzzasantcmalloc Platform Id: linux Crash Type: Use-after-poison READ 1 Crash Address:...

tcmalloc:profile_builder_fuzz: Heap-buffer-overflow in void absl::BytesToHexStringInternal<std::__1::basic_string<char, std::__1::char_

Project: https://github.com/google/tcmalloc.git Detailed Report: https://oss-fuzz.com/testcase?key=5257871728705536 Project: tcmalloc Fuzzing Engine: afl Fuzz Target: profilebuilderfuzz Job Type: aflasantcmalloc Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

DEBIAN-CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

CVE-2005-4895

CVE-2005-4895 affects gperftools' TCMalloc (tcmalloc.cc) prior to 0.4. It describes multiple integer overflows that cause under-allocation when large size values are used, enabling context-dependent attackers to perform memory-related issues such as buffer overflows. The connected documents confi...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

PT-2012-1255

Name of the Vulnerable Software and Affected Versions gperftools versions prior to 0.4 Description The issue is related to multiple integer overflows in TCMalloc tcmalloc.cc that can be exploited by context-dependent attackers to perform memory-related attacks, such as buffer overflows. This occu...