Heap-based Buffer Over-read Vulnerability in Radare2 by Radare
CVE-2019-12790

7.8HIGH

Key Information:

Vendor: Radare
Status: Radare2
Vendor: CVE Published:; 10 June 2019

What is CVE-2019-12790?

The vulnerability allows remote attackers to exploit a heap-based buffer over-read in the r_egg_lang_parsechar function within radare2 versions up to 3.5.1. Due to insufficient length validation in libr/egg/egg.c, this flaw can result in an application crash, potentially enabling unauthorized access or further manipulation. Users are urged to update to patched versions to mitigate the risks associated with this vulnerability.