← Voltar para CVEs
CVE-2021-3674
HIGH7.8
Descricao
A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.
Detalhes CVE
Pontuacao CVSS v3.17.8
SeveridadeHIGH
Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vetor de ataqueLOCAL
ComplexidadeLOW
Privilegios necessariosNONE
Interacao do usuarioREQUIRED
Publicado3/24/2023
Ultima modificacao2/25/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
rizin:rizin
Fraquezas (CWE)
CWE-119CWE-125CWE-125
Referencias
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4(patrick@puiterwijk.org)
https://github.com/rizinorg/rizin/pull/1313(patrick@puiterwijk.org)
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4(af854a3a-2127-422b-91ae-364da2661108)
https://github.com/rizinorg/rizin/pull/1313(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.