GoogleOSV:CVE-2019-12865

HistoryJun 17, 2019 - 11:15 p.m.

CVE-2019-12865

2019-06-1723:15:13

Google

osv.dev

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

27.6%

JSON

In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.

CPENameOperatorVersion
radare2eq2.0.1
radare2eq2.4.0
radare2eq0.8.6
radare2eq0.9
radare2eq0.8.8
radare2eq3.4.0
radare2eq2.0.0
radare2eq3.2.1
radare2eq0.10.4
radare2eq1.6.0

Name	Operator	Version
radare2	eq	2.0.1
radare2	eq	2.4.0
radare2	eq	0.8.6
radare2	eq	0.9
radare2	eq	0.8.8
radare2	eq	3.4.0
radare2	eq	2.0.0
radare2	eq	3.2.1
radare2	eq	0.10.4
radare2	eq	1.6.0

Rows per page:

1-10 of 591

References

github.com/radare/radare2/issues/14334

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IEXZWAMVKGZKHALV4IVWQS2ORJKRH57U/