CVE-2016-6264

7.5 highEPSS 2.7%

Integer signedness error in libc/string/arm/memset.S in uClibc and uClibc-ng before 1.0.16 allows context-dependent attackers to cause a denial of service (crash) via a negative length value to the memset function.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 2.7% chance of exploitation in the next 30 days; higher than 85% of CVEs (scores of 2026-10-31)
Published: 2017-01-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

uclibc-ng_project:uclibc-ng
uclibc:uclibc

References

http://mailman.uclibc-ng.org/pipermail/devel/2016-July/001067.html
http://mailman.uclibc-ng.org/pipermail/devel/2016-May/000890.html
http://www.openwall.com/lists/oss-security/2016/06/29/3
http://www.openwall.com/lists/oss-security/2016/07/21/2
http://www.openwall.com/lists/oss-security/2016/07/21/6

Check your stack JSON