Input Validation Flaw in Radare2 Affects Resource Management
CVE-2021-3673

7.5HIGH

Key Information:

Vendor: Radare
Status: Radare2
Vendor: CVE Published:; 2 August 2021

What is CVE-2021-3673?

An improper input validation vulnerability was identified in Radare2 version 5.3.1, which could be exploited when reading a specially crafted Little Endian (LE) binary. This flaw can lead to resource exhaustion, potentially resulting in a Denial of Service (DoS) condition. Attackers may leverage this vulnerability to affect the availability of services utilizing Radare2, necessitating prompt attention and remediation.