Multiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign functions in libc/bionic/malloc_debug_leak.c in Bi…

published 2012-07-25 14 y ago modified 2026-06-16 4 mo ago also EUVD-2012-2656

cvss: 4.3; version 2.0, NVD
cisa kev: Not listed; not in CISA's catalog
epss: 0.8%; EPSS 0.8% chance of exploitation in 30 days, percentile 56%
public exploits: 0; none known

Multiple integer overflows in the (1) chk_malloc, (2) leak_malloc, and (3) leak_memalign functions in libc/bionic/malloc_debug_leak.c in Bionic (libc) for Android, when libc.debug.malloc is set, make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Patch / fix

links 1

github.com/android/platform_bionic@7f5aa4f commit

Exploit prediction

0.79% chance of exploitation in the next 30 days, higher than 56% of all scored CVEs (FIRST EPSS, 2026-11-09).

Exploits and checks

github.com https://github.com/android/platform_bionic/commit/7f5aa4f35e23fd37425b3a5041737cdf58f87385 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
NVD	2.0	4.3	AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Weakness

CWE-189 Numeric Errors

References

github.com /android/platform_bionic/commit/7f5aa4f35e23fd37425b3a5041737cdf58f87385
exploit, patch
kqueue.org /blog/2012/03/05/memory-allocator-security-revisited/
openwall.com /lists/oss-security/2012/06/05/1
mailing-list
openwall.com /lists/oss-security/2012/06/07/13
mailing-list

Sources

CVE List CVE-2012-2674
NVD CVE-2012-2674

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary