Heap-based Buffer Overflow in radareorg/radare2
CVE-2023-5686

8.8HIGH

Key Information:

Vendor

Radareorg

Vendor
CVE Published:
20 October 2023

What is CVE-2023-5686?

A heap-based buffer overflow was identified in radare2, a popular reverse engineering framework, affecting versions prior to 5.9.0. This vulnerability could potentially allow an attacker to corrupt the memory layout, leading to unexpected behaviors or system instability. Users are urged to update to the latest version to mitigate any risks associated with this vulnerability.

Affected Version(s)

radareorg/radare2 < 5.9.0

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.