Details
-
Bug
-
Status: Closed (View Workflow)
-
Minor
-
Resolution: Fixed
-
2.5.24, 6.4.5, 22.08.4, 23.02.0
-
None
Description
The event is read as an unsigned 32-bit value and then converted into a signed 32-bit value. This results in an attempt to allocate massive amounts of memory as the value is then assigned to a size_t. This is can only happen if a single event exceeds INT_MAX in size.