Back to Database
Status published
High
CVE-2016-7544
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions....
Vulnerability Description
Crypto++ 5.6.4 incorrectly uses Microsoft's stack-based _malloca and _freea functions. The library will request a block of memory to align a table in memory. If the table is later reallocated, then the wrong pointer could be freed.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-7544
Credits & Attribution
No credits recorded in the NVD database.
References
More from cryptopp
View All →CVE-2022-48570
Crypto++ through 8.4 contains a timing side channel in ECDSA...
High
7.5
CVE-2021-43398
Crypto++ (aka Cryptopp) 8.6.0 and earlier contains a timing leakage...
Medium
5.3
CVE-2021-40530
The ElGamal implementation in Crypto++ through 8.5 allows plaintext recovery...
Medium
5.9
CVE-2019-14318
Crypto++ 8.3.0 and earlier contains a timing side channel in...
Medium
5.9
CVE-2017-9434
Crypto++ (aka cryptopp) through 5.6.5 contains an out-of-bounds read vulnerability...
Medium
5.3
Affected Vendor
cryptopp
View all reports →Affected Software
crypto\+\+
Vulnerable Versions:
5.6.4
Timeline
Official Publish:
January 30th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.