Use-After-Free Vulnerability in Radare2 by Radare Org

CVE-2021-32495

What is CVE-2021-32495?

Radare2 contains a use-after-free vulnerability in the 'get_none_object' function within its pyc parser. This issue occurs when the function accesses freed memory, which could potentially allow an attacker to read sensitive data or trigger unintended behavior in the application. Exploiting this vulnerability may lead to denial of service, impacting system integrity and availability. Users should ensure they are running patched versions to mitigate risk.

References