CVE Catalog
CVE-2017-9728
CriticalSummary
In uClibc version 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.
Risk Assessment
An attacker could exploit this vulnerability to read data outside of allocated memory, potentially leading to the disclosure of sensitive information.
Recommendation
It is recommended to upgrade to a newer version of uClibc to mitigate this vulnerability.
Original NVD description (English source)
In uClibc 0.9.33.2, there is an out-of-bounds read in the get_subexp function in misc/regex/regexec.c when processing a crafted regular expression.