CVE-2021-3674

2023-03-2400:00:00

CWE-119

fedora

www.cve.org

rizin

memory corruption

code execution

elf section

out of bounds reads

0.001 Low

EPSS

Percentile

28.1%

JSON

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object’s callback function.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "rizin",
    "versions": [
      {
        "version": "affected rizin after version v0.2.1 until commit 1e0c34946dddf9b8e5e63933aefacf2b26d08103",
        "status": "affected"
      }
    ]
  }
]

References

gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4

github.com/rizinorg/rizin/pull/1313

0.001 Low

EPSS

Percentile

28.1%

JSON

Related for CVELIST:CVE-2021-3674