Use-After-Free Vulnerability in Radare2 by Radare Org
CVE-2021-32495

10CRITICAL

Key Information:

Vendor

Radare2

Status
Radare2
Vendor
CVE Published:
7 July 2023

What is CVE-2021-32495?

Radare2 contains a use-after-free vulnerability in the 'get_none_object' function within its pyc parser. This issue occurs when the function accesses freed memory, which could potentially allow an attacker to read sensitive data or trigger unintended behavior in the application. Exploiting this vulnerability may lead to denial of service, impacting system integrity and availability. Users should ensure they are running patched versions to mitigate risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

radare2 radare2 5.3.0-git 26142

References

https://github.com/radareorg/radare2/issues/18666
https://github.com/radareorg/radare2/commit/5e16e2d1c9fe2...

CVSS V3.1

Score:
10
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.