CVE-2012-2677: Boost Pool

Medium severity, CVSS 5.0. EPSS: 3.9% chance of exploitation in the next 30 days.

Integer overflow in the ordered_malloc function in boost/pool/pool.hpp in Boost Pool before 3.9 makes it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large memory chunk size value, which causes less memory to be allocated than expected.

Affected products

• Boost Pool: up to and including 1.0.0; version 2.0.0 only

Published 2012-07-25. Last modified 2026-06-16.