CVE-2016-7544: High severity Cryptopp Crypto\+\+ vulnerability
Published Jan 30, 2017
·Updated
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based malloca and freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.
Affected Software
4 affected components
Cryptopp Crypto\+\+=5.6.4
Microsoft Windows
All of the following
Cryptopp Crypto\+\+=5.6.4
Microsoft Windows
Remediation
Patch Available
Patch Available
Patch Available
Event History
Jan 30, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-7544?
The severity of CVE-2016-7544 is considered to be high due to potential memory corruption issues.
2
How do I fix CVE-2016-7544?
To fix CVE-2016-7544, you should upgrade to a version of Crypto++ that is higher than 5.6.4, where the issue has been resolved.
3
What software is affected by CVE-2016-7544?
CVE-2016-7544 specifically affects Crypto++ version 5.6.4.
4
What type of vulnerability is CVE-2016-7544?
CVE-2016-7544 is a memory allocation vulnerability that can lead to incorrect memory management.
5
Can CVE-2016-7544 be exploited remotely?
CVE-2016-7544 does not indicate a remote exploit, but local applications using the vulnerable library may be affected.