CVE-2020-6096
Public on 2020-04-01
Modified on 2021-02-19
Description
A signed comparison vulnerability was found in GNU libc in the ARMv7 implementation of memcpy(). The flaw affects the third argument to memcpy() that specifies the number of bytes to copy. An underflow on the third argument could lead to undefined behavior such as out-of-bounds memory write and potentially remote code execution.
CVSS v3 Base Score
See breakdown
