CVE-2012-4412

CVE-2012-4412 is an integer overflow vulnerability in the GNU C Library (glibc) version 2.17 and earlier, specifically within the string/strcoll_l.c function. This flaw can be triggered by a long string, leading to a heap-based buffer overflow that may result in a denial of service (crash) or potentially arbitrary code execution. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists (EDB-37783) detailing the vulnerability, though it has received minimal community discussion or media coverage.