Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-28pv-xxcq-fr89

Опубликовано: 24 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

EPSS

Процентиль: 24%
0.00079
Низкий

7.8 High

CVSS3

Дефекты

CWE-119
CWE-125

Связанные уязвимости

CVSS3: 7.8
nvd
больше 2 лет назад

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

EPSS

Процентиль: 24%
0.00079
Низкий

7.8 High

CVSS3

Дефекты

CWE-119
CWE-125