Threat Intelligence Database

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.

A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8b25c773785d85cb0103410a0905089d286921c2. It is advisable to implement a patch to correct this issue.

A heap-based buffer overflow vulnerability exists in radareorg radare2 versions 6.1.0 through 6.1.6 in the function r_bin_java_inner_classes_attr_calc_size within the Java Line Number Table Parser component. This flaw requires local access to exploit and has a medium severity rating with a CVSS score of 4.8. A patch identified by commit cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87 is available to address the issue.

An integer overflow vulnerability exists in radareorg radare2 versions 6.1.0 through 6.1.6 in the cmd_anal_opcode function of the hexpairs Parser component. This flaw requires local access to exploit and can lead to unexpected behavior due to integer overflow. A patch identified by commit 84e773986e7e5bb30453a9384f498ec0ccc9d0a9 is available to remediate this issue. The vulnerability has a medium severity rating with a CVSS score of 4.8.

An integer overflow vulnerability exists in radareorg radare2 up to version 6.1.6 in the function core_anal_bytes within libr/core/cmd_anal.inc. The issue requires local access to exploit and has been publicly disclosed. The vulnerability has a medium severity rating with a CVSS score of 4.8. Users are advised to apply a patch once available to mitigate this issue.