This vulnerability involves an integer overflow or wraparound (CWE-190) triggered by passing a large alignment argument to memory allocation functions in glibc (memalign, posix_memalign, aligned_alloc) in versions 2.30 through 2.42. The overflow can lead to heap corruption if the attacker controls both the size and alignment parameters, with the size parameter close to PTRDIFF_MAX and alignment values in the range [1<<62+1, 1<<63]. Since alignment arguments are typically constrained and not attacker-controlled, exploitation is limited and uncommon. The vulnerability has a CVSS 3.1 score of 8.4, indicating high severity with impacts on confidentiality, integrity, and availability. No patch or vendor advisory details are provided in the input.

Successful exploitation could lead to heap corruption, potentially allowing an attacker to compromise confidentiality, integrity, and availability of affected systems. However, exploitation is constrained by the requirement that the attacker must control both size and alignment parameters with very large values, which is uncommon in typical application usage. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the complexity and constraints on exploitation, typical usage patterns may mitigate risk. Monitor official GNU C Library advisories for patches or updates addressing this issue.