CVE-2016-7544

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-399

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.openwall.com/lists/oss-security/2016/09/23/5Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/9Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/93164Third Party Advisory, VDB Entry
https://github.com/weidai11/cryptopp/issues/302Issue Tracking, Patch, Third Party Advisory
https://www.cryptopp.com/release565.htmlRelease Notes, Vendor Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/5Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2016/09/23/9Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/93164Third Party Advisory, VDB Entry
https://github.com/weidai11/cryptopp/issues/302Issue Tracking, Patch, Third Party Advisory
https://www.cryptopp.com/release565.htmlRelease Notes, Vendor Advisory

Timeline

Published: Jan 30, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-75458.8SELinux policycoreutils allows local users to execute arbitrary commands outside of the sandbox via a crafted TIOCSTI ioctl call.CVE-2016-75479.8A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.c CVE-2016-75498.8Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which CVE-2016-75507.5asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote).CVE-2016-75517.5chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-c CVE-2016-75529.8On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthent CVE-2016-75533.3The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which mi CVE-2016-75555.5The avi_read_header function in libavformat/avidec.c in FFmpeg before 3.1.4 is vulnerable to memory leak when decoding an AVI file that has CVE-2016-75609.8The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account,CVE-2016-75617.2Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 allow administrators to obtain sensitive user crede CVE-2016-75625.5The ff_draw_pc_font function in libavcodec/cga_data.c in FFmpeg before 3.1.4 allows remote attackers to cause a denial of service (buffer ov CVE-2016-75637.5The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at th