{"id":"CVE-2018-6551","details":"The malloc implementation in the GNU C Library (aka glibc or libc6), from version 2.24 to 2.26 on powerpc, and only in version 2.26 on i386, did not properly handle malloc calls with arguments close to SIZE_MAX and could return a pointer to a heap region that is smaller than requested, eventually leading to heap corruption.","modified":"2026-04-16T06:19:45.633982463Z","published":"2018-02-02T14:29:01.590Z","related":["SUSE-SU-2018:0451-1","SUSE-SU-2018:0565-1"],"references":[{"type":"WEB","url":"https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=8e448310d74b283c5cd02b9ed7fb997b47bf9b22"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190404-0003/"},{"type":"REPORT","url":"https://sourceware.org/bugzilla/show_bug.cgi?id=22774"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/bminor/glibc","events":[{"introduced":"fdfc9260b61d3d72541f18104d24c7bcb0ce5ca2"},{"last_affected":"1c9a5c270d8b66f30dcfaf1cb2d6cf39d3e18369"}],"database_specific":{"versions":[{"introduced":"2.24"},{"last_affected":"2.26"}]}}],"versions":["glibc-2.24","glibc-2.24.90","glibc-2.25","glibc-2.25.90","glibc-2.26"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-6551.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}