CVE-2019-19647

radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write

published December 9, 2019

CVSS
—
EPSS
2%
Percentile
75.4
In the wild
Unconfirmed
What it is

radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01585 · 75.4th percentile
Published
2019-12-09T00:36Z
EPSS history
Timeline
  • 09 DEC 00:36Z
    radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write
    cvelistv5