Logo
componentabseil-cpp
Name
abseil-cpp
Version
20211102
Type
library
Description
Abseil is a cpp library like STL
Licenses
Apache-2.0
PURL
-
CPE
cpe:2.3:*:*:abseil-cpp:20211102.0+gitX:*:*:*:*:*:*:*

Other Versions#


Project
Branch
Version
master
20260107.1
scarthgap
20240116.3

Patches#


#
Title
Author
Resolve
1
absl/strings/internal/str_format/extension.h: add missing
Sergei Trofimovich <slyich@gmail.com>
2
Remove maes option from cross-compilation
Sinan Kaya <sinan.kaya@microsoft.com>
3
absl: always use <asm/sgidefs.h>
Khem Raj <raj.khem@gmail.com>
4
Fix potential integer overflow in hash container
Changqing Li <changqing.li@windriver.com>
CVE-2025-0838
5
Patch #5
Khem Raj <raj.khem@gmail.com>

Vulnerabilities#


Name
Analysis
Description
Patched
There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1