← Zuruck zu CVEs
CVE-2021-3674
HIGH7.8
Beschreibung
A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.
CVE Details
CVSS v3.1 Bewertung7.8
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionREQUIRED
Veroffentlicht3/24/2023
Zuletzt geandert2/25/2025
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
rizin:rizin
Schwachen (CWE)
CWE-119CWE-125CWE-125
Referenzen
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4(patrick@puiterwijk.org)
https://github.com/rizinorg/rizin/pull/1313(patrick@puiterwijk.org)
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rizinorg/rizin/pull/1313(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.