critical9.8
CVE-2020-35198
An issue was discovered in Wind River VxWorks 7.
Impact
An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Windriver | Vxworks | from 6.9 before 6.9.4.12 from 7.0 before 21.03 Version 6.9.4.12 |
| Oracle | Communications Eagle | from 46.8.0 through 46.8.2 from 46.9.1 through 46.9.3 Version 46.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-35198
- https://support2.windriver.com/index.php?page=security-notices
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2020-35198
- https://support2.windriver.com/index.php?page=security-notices
- https://www.oracle.com/security-alerts/cpuapr2022.html