Heap-buffer-overflow in load_buffer in radare2
Summary
OSV-2023-96: Heap-buffer-overflow in load_buffer. Affects radare2 versions >= 2b77b277d67ce061ee6ef839e7139ebc2103c1e3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
radare2 is an open-source framework for reverse engineering and binary analysis. It provides a set of tools and libraries for analyzing executable files, disassembling code, and performing various reverse engineering tasks. The vulnerability in radare2 is related to a heap-buffer-overflow issue in the load_buffer function.
Vulnerability Detail
The vulnerability in radare2 allows for a heap-buffer-overflow read of 8 bytes. It can be triggered when loading a buffer into the radare2 object. The specific crash state occurs in the load_buffer, r_bin_object_new, and r_bin_file_new_from_buffer functions. The issue was reported through the OSS-Fuzz project, and more details can be found in the provided link. The severity of this vulnerability is considered medium.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is currently no known workaround for this vulnerability. It is advised to apply the fix mentioned above as soon as possible.
Conclusion
In conclusion, the radare2 package is vulnerable to a heap-buffer-overflow issue. It is crucial to update to a fixed version of the package to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for radare2 →
FAQ
radare2 is an open-source framework for reverse engineering and binary analysis. It provides tools and libraries for analyzing executable files and performing various reverse engineering tasks.
A heap-buffer-overflow is a type of memory vulnerability where a program writes data beyond the bounds of a dynamically allocated buffer in the heap. This can lead to memory corruption and potentially allow an attacker to execute arbitrary code or crash the program.
This vulnerability was discovered through the OSS-Fuzz project, which performs continuous fuzz testing on various open-source projects to uncover potential vulnerabilities.
The severity of this vulnerability is considered medium.
Yes, a fix is available for this vulnerability. It is recommended to update the radare2 package to a version that includes the fix.
References
Related vulnerabilities
Recent vulnerabilities recorded for radare2.
