Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation.
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.0414·Published 2016-12-12·Will not fixCWE-119
