CVE-2005-4895

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-07-25 · updated 2026-06-16
Weakness: CWE-189

Description

Multiple integer overflows in TCMalloc (tcmalloc.cc) in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected.

Affected products

Csilvers Gperftools: through 0.3; 0.1, 0.2

References

http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog
http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/
http://code.google.com/p/gperftools/source/browse/tags/perftools-0.4/ChangeLog
http://kqueue.org/blog/2012/03/05/memory-allocator-security-revisited/

Get alerted when CVE-2005-4895 or the next vulnerability affects your stack