CVE-2020-28895

Description

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

Weakness classification

• CWE-190: Integer Overflow or Wraparound
• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Permissions Required
• cve@mitre.org — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory