Отправить #654340: Ogre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management RoutinesИнформация

НазваниеOgre3D Ogre v14.4.1 / master commit f629d22 Mismatched Memory Management Routines
ОписаниеThe issue arises from a memory management mismatch. The function stbi_write_png_to_mem() allocates its output buffer using malloc (via STBIW_MALLOC). Ogre then wraps this buffer inside MemoryDataStream(data, len, true), which assumes ownership and later frees it with delete[]. Because malloc and delete[] are incompatible allocators, this leads to undefined behavior. AddressSanitizer consistently detects the problem as an alloc-dealloc-mismatch.
Источник⚠️ https://github.com/OGRECave/ogre/issues/3446
Пользователь
 sand (UID 90194)
Представление15.09.2025 08:24 (11 месяцы назад)
Модерация26.09.2025 08:40 (11 days later)
Статуспринято
Запись VulDB325958 [OGRECave Ogre до 14.4.1 OgreSTBICodec.cpp STBIImageCodec::encode Local Privilege Escalation]
Баллы20

Want to know what is going to be exploited?

We predict KEV entries!