Segmentation Fault in Radare2 Command Handling

CVE-2020-27795

What is CVE-2020-27795?

A segmentation fault occurred in Radare2 when the 'adf' command is executed with invalid or no arguments. This leads to a null pointer dereference in the function ensure_fcn_range, resulting from the failure to retrieve function data correctly. If the command does not supply valid input, it can crash the application, affecting stability and potentially leading to a denial of service. Users are encouraged to update to the latest version to mitigate this issue.

References