cve/2020/CVE-2020-28895.md

CVE-2020-28895

Description

In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.

POC

Reference

• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpuapr2022.html

Github

No PoCs found on GitHub currently.