Patchwire CVEs, their patch status, and feeds to follow them

CVE-2020-35198

No fix known EPSS 2%

An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

Published 2021-05-12 · CVE record · OSV

Products: windriver vxworks, oracle communications_eagle