CVE-2012-3480

CVE-2012-3480 describes multiple integer overflows in various string-to-number conversion functions within the GNU C Library (glibc) 2.16. These flaws, specifically in functions like strtod and strtof, allow a local attacker to trigger a stack-based buffer overflow by providing a long string. This vulnerability has a CVSS score of 4.6, indicating a low attack complexity and requiring local access, with potential impacts including denial of service (application crash) and possibly arbitrary code execution. While there is no evidence of active exploitation (KEV: No), an ExploitDB entry (EDB-37631) confirms the existence of exploit code, though there is minimal community discussion or media coverage surrounding this CVE.