The affected product is vulnerable to a heap-based buffer overflow via uninitialized pointer, which may allow an attacker to execute arbitrary code
Solution:
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
The product accesses or uses a pointer that has not been initialized.
| Link | Tags |
|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsa-22-146-02 | third party advisory us government resource |