Integer Overflow Vulnerability in Bionic libc for Android

CVE-2012-2674

Summary

Multiple integer overflow vulnerabilities exist in the chk_malloc, leak_malloc, and leak_memalign functions of Bionic libc for Android. When debugging features are enabled, these flaws can allow context-dependent attackers to exploit memory-related vulnerabilities, increasing the risk of attacks such as buffer overflows. By utilizing large size values, attackers may cause low memory allocation, leading to potential memory corruption and application instability.

References