CVE-2021-3674CWE-119

A flaw was found in rizin

High · published March 24, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2023-03-24T00:00Z
EPSS history
Timeline
  • 24 MAR 00:00Z
    A flaw was found in rizin
    cvelistv5