Heap Buffer overflow in Abseil

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1

N/A

整数溢出或超界折返

Abseil 安全漏洞

Abseil是Abseil开源的一个 Abseil 通用库（C++）。 Abseil存在安全漏洞，该漏洞源于absl::{flat,node}hash{set​​,map}的大小构造函数、reserve和rehash方法未对其size参数施加上限，导致缓冲区溢出问题。

N/A

N/A