CVE-2017-18269

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

An SSE2-optimized memmove implementation for i386 in sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S in the GNU C Library (aka glibc or libc6) 2.21 through 2.27 does not correctly perform the overlapping memory check if the source memory range spans the middle of the address space, resulting in corrupt data being produced by the copy operation. This may disclose information to context-dependent attackers, or result in a denial of service, or, possibly, code execution.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published: May 18, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-182707.1In the Linux kernel before 4.13.5, a local user could create keyrings for other users via keyctl commands, setting unwanted defaults or caus CVE-2017-182716.5In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadMIFFImage in coders/miff.c, whic CVE-2017-182726.5In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-25, there is a use-after-free in ReadOneMNGImage in coders/png.c, which allows attackers to cause CVE-2017-182736.5In ImageMagick 7.0.7-16 Q16 x86_64 2017-12-22, an infinite loop vulnerability was found in the function ReadTXTImage in coders/txt.c, which CVE-2017-182747.8While iterating through the models contained in a fixed-size array in the actData structure, which also stores an incorrect number of models CVE-2017-182755.5A new account can be inserted into simContacts service using Android command line tool in Snapdragon Automobile, Snapdragon Mobile, Snapdrag CVE-2017-182767.8Secure camera logic allows display/secure camera controllers to access HLOS memory during secure display or camera session in Snapdragon Mob CVE-2017-182775.5When dynamic memory allocation fails, currently the process sleeps for one second and continues with infinite loop without retrying for memo CVE-2017-182787.8An integer underflow may occur due to lack of check when received data length from font_mgr_qsee_request_service is bigger than the minimal CVE-2017-182797.8Lack of check of buffer length before copying can lead to buffer overflow in camera module in Small Cell SoC, Snapdragon Mobile, Snapdragon CVE-2017-182807.8In Snapdragon (Automobile, Mobile, Wear) in version MDM9607, MSM8909W, MSM8996AU, SD 210/SD 212/SD 205, SD 425, SD 427, SD 430, SD 435, SD 4 CVE-2017-182815.5A bool variable in Video function, which gets typecasted to int before being read could result in an out of bound read access in all Android