Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service (heap buffer overflow crash) and possibly execute arbitrary code via huge allocation. http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-9427