CVE-2019-14745

Radare2 CVE-2019-14745 is a command-injection flaw in bin_symbols() (libr/core/cbin.c) present in versions before 3.7.0, due to improper handling of symbol names embedded in executables. By feeding a crafted binary, an attacker could execute arbitrary shell commands with the victim’s privileges. ...