Every CVE Search/ Get API key

CVE-2012-2673

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and...

5.0 MediumFix available

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Exploit likelihood

2.77%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
CVE-2012-2673
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
CVE-2012-2673
Updated
2026-11-02
EUVDEUVD-2012-2655 No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
EUVD-2012-2655
Updated
2026-11-03
GitHub AdvisoriesGHSA-779g-vf77-jgjv No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and...

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
GHSA-779g-vf77-jgjv
Updated
2026-11-02
OSV No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
CVE-2012-2673
Updated
2026-11-02
OSVDEBIAN-CVE-2012-2673 No score

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Record
DEBIAN-CVE-2012-2673
Updated
2026-11-02
OSVopenSUSE-SU-2024:10302-1 No score

gc-devel-7.4.2-3.5 on GA media

These are all security issues fixed in the gc-devel-7.4.2-3.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10302-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
libgc
Debian:12
 before 1:7.1-9
1:7.1-9
libgc
Debian:13
 before 1:7.1-9
1:7.1-9
libgc
Debian:14
 before 1:7.1-9
1:7.1-9
gc
Red Hat:enterprise_linux:6::client
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::client
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:enterprise_linux:6::computenode
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::computenode
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:enterprise_linux:6::server
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
Show 9 moreShow less
Affected packages
PackageAffectedFixed
gc-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::server
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:enterprise_linux:6::workstation
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc-devel
Red Hat:enterprise_linux:6::workstation
 before 0:7.1-12.el6_4
0:7.1-12.el6_4
gc
Red Hat:network_satellite:5.6::el5
 before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat
gc-debuginfo
Red Hat:network_satellite:5.6::el5
 before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat
gc
Red Hat:network_proxy:5.6::el5
 before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat
gc-debuginfo
Red Hat:network_proxy:5.6::el5
 before 0:7.1-12.2.el5sat
0:7.1-12.2.el5sat

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-2673 is a medium vulnerability (CVSS 5.0) in Boehm-demers-weiser Garbage Collector, published July 25, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.77%, the 86th percentile. Fixed in libgc 1:7.1-9.

References

Show 24 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open