CVE-2016-8859
CriticalSummary
Multiple integer overflows in the TRE library and musl libc can lead to memory corruption. Attackers can exploit a large number of states or tags, resulting in an out-of-bounds write.
Risk Assessment
Organizations may be exposed to attacks that lead to memory corruption, potentially resulting in unpredictable application or system behavior. Exploitation of this vulnerability could lead to privilege escalation or data leakage.
Recommendation
It is recommended to update the TRE library and musl libc to the latest versions that address these integer overflows. Additionally, conducting a code audit to identify and fix potential vulnerable areas is advisable.
Original NVD description (English source)
Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.