Segmentation Fault in Radare2 4.5.0 Affects PE File Parsing

CVE-2020-17487

What is CVE-2020-17487?

Radare2 version 4.5.0 contains a vulnerability that results from improper parsing of signature information in PE files. This issue leads to a segmentation fault in the function r_x509_parse_algorithmidentifier, specifically within the libr/util/x509.c module. The problem arises from a malformed object identifier found in IMAGE_DIRECTORY_ENTRY_SECURITY, which can disrupt normal operations and potentially expose systems to further attacks.

References