Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-28895

No fix known EPSS 2%CVSS 7.3

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

Published 2021-02-03 · CVE record · OSV

Products: windriver vxworks, oracle communications_eagle