CVE-2005-4895

Name of the Vulnerable Software and Affected Versions gperftools versions prior to 0.4

Description The issue is related to multiple integer overflows in TCMalloc (tcmalloc.cc) that can be exploited by context-dependent attackers to perform memory-related attacks, such as buffer overflows. This occurs when a large size value is provided, resulting in less memory being allocated than expected.

Recommendations For versions prior to 0.4, update to version 0.4 or later to resolve the issue. As a temporary workaround, consider restricting the input size values to prevent large values from being processed by the vulnerable TCMalloc function.