← Volver a CVEs
CVE-2021-3674
HIGH7.8
Descripcion
A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.
Detalles CVE
Puntuacion CVSS v3.17.8
SeveridadHIGH
Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vector de ataqueLOCAL
ComplejidadLOW
Privilegios requeridosNONE
Interaccion usuarioREQUIRED
Publicado3/24/2023
Ultima modificacion2/25/2025
Fuentenvd
Avistamientos honeypot0
Productos afectados
rizin:rizin
Debilidades (CWE)
CWE-119CWE-125CWE-125
Referencias
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4(patrick@puiterwijk.org)
https://github.com/rizinorg/rizin/pull/1313(patrick@puiterwijk.org)
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rizinorg/rizin/pull/1313(af854a3a-2127-422b-91ae-364da2661108)
Correlaciones IOC
Sin correlaciones registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.