CVE-2017-1000075
CriticalSummary
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function.
Risk Assessment
Exploitation of this vulnerability may lead to unauthorized access or system crashes.
Recommendation
It is recommended to upgrade to a newer version of the software to mitigate this vulnerability.
Other vulnerabilities in Creolabs Gravity 1.0
See all- CVE-2026-40504Critical
A heap buffer overflow vulnerability exists in Creolabs Gravity before version 0.9.6 in the gravity_vm_exec function. Attackers can exploit scripts with many string literals at global scope to write out-of-bounds memory.
- CVE-2017-1000173Critical
In Creolabs Gravity version 1.0, there is a heap buffer overflow vulnerability that may lead to code execution. By creating a large loop while pushing data to a buffer, the bounds checking of that buffer can be bypassed.
- CVE-2017-1000074Critical
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the string_repeat() function.
- CVE-2017-1000073Critical
Creolabs Gravity version 1.0 is vulnerable to a heap overflow in an undisclosed component that can result in arbitrary code execution.
Original NVD description (English source)
Creolabs Gravity version 1.0 is vulnerable to a stack overflow in the memcmp function