VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 27, 2014· Updated Jun 16, 2026

CVE-2011-2702

CVE-2011-2702

Description

Integer signedness error in Glibc before 2.13 and eglibc before 2.13, when using Supplemental Streaming SIMD Extensions 3 (SSSE3) optimization, allows context-dependent attackers to execute arbitrary code via a negative length parameter to (1) memcpy-ssse3-rep.S, (2) memcpy-ssse3.S, or (3) memset-sse2.S in sysdeps/i386/i686/multiarch/, which triggers an out-of-bounds read, as demonstrated using the memcpy function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • GNU/Eglibc
    cpe:2.3:a:gnu:eglibc:*:*:*:*:*:*:*:*
    Range: <=2.12
  • GNU/Glibc3 versions
    cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*range: <=2.12.2
    • cpe:2.3:a:gnu:glibc:2.12:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:glibc:2.12.1:*:*:*:*:*:*:*
  • glibc/glibcllm-fuzzy
    Range: <2.13
  • eglibc/eglibcllm-fuzzy
    Range: <2.13

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.