Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
cjlin1/libsvm
master @ 6b90713
2
Fixes
1
CVEs
HIGH
Peak severity
Highlights
Buffer Overflow: 1 prior fix. Scrutinize any change in this area.
svm.cpp: most-fixed (2 issues). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Integer Overflow: An integer underflow vulnerability in the SVM cache size calculation can result in incorrect memory allocation parameters passed to realloc, causing buffer corruption or application crashes. This requires strict boundary and size checks before executing dynamic allocations.
Buffer Overflow: The historical use of unsafe, unbounded formatting functions like vsprintf exposes the application to stack or heap-based buffer overflows. Replacing these instances with size-bounded alternatives like vsnprintf is critical to safely format arbitrary strings.
Denial of Service: A crafted model containing a abnormally large value in the _n_support array can trigger a segmentation fault within the svm_predict_values function, allowing attackers to crash the application parsing the model.