View at Official ubuntu advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2018-6485 medium priority: Ubuntu including 2 source packages (eglibc, glibc), 18 status rows across 9 suites (artful, bionic, cosmic, disco, eoan, focal, trusty, upstream, xenial): DNE 8, not-affected 5, released 3, ignored 1, needs-triage 1.
An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.