CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...

CVE-2022-1240

CVE-2022-1240 affects radare2 prior to 5.8.6. The vulnerability is a heap buffer overflow in libr/bin/format/mach0/mach0.c, with the issue occurring when address sanitizer is disabled during compilation, potentially leading to exploitation via the r_str_ncpy path. Public documents explicitly desc...

CVE-2022-1240

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the rstrncpy function. Therefore I think it is very likely to be exploitable. For more general...