Threats tagged 'ghsa-rm44-gpwr-xh4q'

A vulnerability in the GNU C Library versions 2.2 through 2.44 affects the wide scanf family of functions when called with %s or %[ conversions without the 'l' length modifier. This causes an extra null byte to be written just past the end of the destination array if the converted multibyte string exactly fills the buffer. The overflow byte is always a null byte, which can corrupt adjacent memory or cause a crash. This issue affects all architectures and ABIs supported by the GNU C Library. Narrow scanf functions and other related conversions are not affected.