إرسال #654340: Ogre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routinesالمعلومات

عنوانOgre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routines
الوصفThe issue arises from a memory management mismatch. The function stbi_write_png_to_mem() allocates its output buffer using malloc (via STBIW_MALLOC). Ogre then wraps this buffer inside MemoryDataStream(data, len, true), which assumes ownership and later frees it with delete[]. Because malloc and delete[] are incompatible allocators, this leads to undefined behavior. AddressSanitizer consistently detects the problem as an alloc-dealloc-mismatch.
المصدر⚠️ https://github.com/OGRECave/ogre/issues/3446
المستخدم
 sand (UID 90194)
ارسال15/09/2025 08:24 AM (11 أشهر منذ)
الاعتدال26/09/2025 08:40 AM (11 days later)
الحالةتمت الموافقة
إدخال VulDB325958 [OGRECave Ogre حتى 14.4.1 OgreSTBICodec.cpp STBIImageCodec::encode Local Privilege Escalation]
النقاط20

Want to know what is going to be exploited?

We predict KEV entries!