oob write in set_mem_access arch/AArch64/AArch64InstPrinter.c:73 #600

Activity

1. aquynh commented on Mar 7, 2016

   

   aquynh

   on Mar 7, 2016

   Collaborator

   More actions

   merged, thanks for the fix!
2. aquynh

   closed this as completedon Mar 7, 2016
4. aquynh commented on Mar 16, 2016

   

   aquynh

   on Mar 16, 2016

   Collaborator

   More actions

   this is so cool! any links to this CVE yet?

   just to clarify: this bug was in a very new commit to provide explicit register access for ARM64 arch, and it was there only about 2 week until it was detected. in addition, this is only in the "next" branch, which is still under development, so the number of people get affected is minimal.

   thanks.
5. AriEi4 commented on Sep 14, 2016

   

   AriEi4

   on Sep 14, 2016

   More actions

   @revskills Are you sure that Mitre assigned CVE-2016-3160 for this?

   According to their website the CVE is still reserved and not in use -
   https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-3160