제출 #654340: Ogre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routines정보

제목Ogre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routines
설명The issue arises from a memory management mismatch. The function stbi_write_png_to_mem() allocates its output buffer using malloc (via STBIW_MALLOC). Ogre then wraps this buffer inside MemoryDataStream(data, len, true), which assumes ownership and later frees it with delete[]. Because malloc and delete[] are incompatible allocators, this leads to undefined behavior. AddressSanitizer consistently detects the problem as an alloc-dealloc-mismatch.
원천⚠️ https://github.com/OGRECave/ogre/issues/3446
사용자
 sand (UID 90194)
제출2025. 09. 15. AM 08:24 (11 개월 ago)
모더레이션2025. 09. 26. AM 08:40 (11 days later)
상태수락
VulDB 항목325958 [OGRECave Ogre 까지 14.4.1 OgreSTBICodec.cpp STBIImageCodec::encode Local Privilege Escalation]
포인트들20

Interested in the pricing of exploits?

See the underground prices here!