Joseph Myers

The issue is related to multiple stack-based buffer overflows in the GNU C Library. This can be exploited by context-dependent attackers to cause a denial of service, such as an application crash, or possibly execute arbitrary code. The overflows occur when a long argument is passed to certain functions, including the `nan`, `nanf`, or `nanl` functions.

The issue is related to an integer overflow in the ` IO wstr overflow` function, which can lead to a denial of service (application crash) or possibly allow execution of arbitrary code. This is triggered by computing a size in bytes, resulting in a heap-based buffer overflow.

The issue allows context-dependent attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long line containing wide characters that are improperly handled in a wscanf call. This occurs due to the ADDW macro in stdio-common/vfscanf.c not properly considering data-type size during memory allocation.

The issue is related to the ADDW macro in stdio-common/vfscanf.c, which does not properly consider data-type size during a risk-management decision for use of the alloca function. This might allow attackers to cause a denial of service or overwrite memory locations beyond the stack boundary via a long line containing wide characters that are improperly handled in a wscanf call.