CVE-2012-2673

Multiple integer overflows in the (1) GC_generic_malloc and (2) calloc functions in malloc.c, and the (3) GC_generic_malloc_ignore_off_page function in mallocx.c in Boehm-Demers-Weiser GC (libgc) before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

• CWE-189

• https://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
• https://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html
• https://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html
• https://rhn.redhat.com/errata/RHSA-2013-1500.html
• https://rhn.redhat.com/errata/RHSA-2014-0149.html
• https://rhn.redhat.com/errata/RHSA-2014-0150.html
• https://www.mandriva.com/security/advisories?name=MDVSA-2012:158
• https://www.openwall.com/lists/oss-security/2012/06/05/1
• https://www.openwall.com/lists/oss-security/2012/06/07/13
• https://www.securityfocus.com/bid/54227
• https://www.ubuntu.com/usn/USN-1546-1
• https://github.com/ivmai/bdwgc/blob/master/ChangeLog
• https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3Exploit, Patch
• https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bbExploit, Patch
• https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1Patch
• https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9aPatch
• https://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
• https://lists.fedoraproject.org/pipermail/package-announce/2012-June/082926.html
• https://lists.fedoraproject.org/pipermail/package-announce/2012-June/082988.html
• https://rhn.redhat.com/errata/RHSA-2013-1500.html
• https://rhn.redhat.com/errata/RHSA-2014-0149.html
• https://rhn.redhat.com/errata/RHSA-2014-0150.html
• https://www.mandriva.com/security/advisories?name=MDVSA-2012:158
• https://www.openwall.com/lists/oss-security/2012/06/05/1
• https://www.openwall.com/lists/oss-security/2012/06/07/13
• https://www.securityfocus.com/bid/54227
• https://www.ubuntu.com/usn/USN-1546-1
• https://github.com/ivmai/bdwgc/blob/master/ChangeLog
• https://github.com/ivmai/bdwgc/commit/6a93f8e5bcad22137f41b6c60a1c7384baaec2b3Exploit, Patch
• https://github.com/ivmai/bdwgc/commit/83231d0ab5ed60015797c3d1ad9056295ac3b2bbExploit, Patch
• https://github.com/ivmai/bdwgc/commit/be9df82919960214ee4b9d3313523bff44fd99e1Patch
• https://github.com/ivmai/bdwgc/commit/e10c1eb9908c2774c16b3148b30d2f3823d66a9aPatch

Published

Jul 25, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-2667Session fixation vulnerability in lib/user/sfBasicSecurityUs…
• CVE-2012-2668libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and e…
• CVE-2012-2669The main function in tools/hv/hv_kvp_daemon.c in hypervkvpd,…
• CVE-2012-2670manageuser.php in Collabtive before 0.7.6 allows remote auth…
• CVE-2012-2671The Rack::Cache rubygem 0.3.0 through 1.1 caches Set-Cookie …
• CVE-2012-2672Oracle Mojarra 2.1.7 does not properly "clean up" the FacesC…
• CVE-2012-2674Multiple integer overflows in the (1) chk_malloc, (2) leak_m…
• CVE-2012-2675Multiple integer overflows in the (1) CallMalloc (malloc) an…
• CVE-2012-2676Multiple integer overflows in the (1) malloc and (2) calloc …
• CVE-2012-2677Integer overflow in the ordered_malloc function in boost/poo…
• CVE-2012-2678389 Directory Server before 1.2.11.6 (aka Red Hat Directory …
• CVE-2012-2679Red Hat Network (RHN) Configuration Client (rhncfg-client) i…