The GNU C Library / glibc · Siemens / SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens / SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · +1
9.8 · CVSS 3.1Critical
Description
Calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library version 2.7 to version 2.43 with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow.