A vulnerability in the mmap function of mman.c allows out of bounds read and write due to incorrect bounds checking on mapping size truncation. This flaw can be exploited locally to escalate privileges to system level without requiring user interaction.