Threats tagged 'ghsa-j4j9-82qf-ghhc'

apitrace versions 2.0 through 14.0 contain a heap-based buffer overflow vulnerability in the SnappyFile::flushReadCache() function. This flaw allows attackers to write beyond the allocated buffer by supplying a crafted .trace file with an oversized compressed chunk length. Exploitation occurs when users dump, inspect, or replay the malicious .trace file, leading to heap memory corruption.