CVEs-PoC/2018/CVE-2018-6485.md

CVE-2018-6485

Description

An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.

POC

Reference

• https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html

Github

• https://github.com/flyrev/security-scan-ci-presentation