CVE-2022-21711CWE-125

Out-of-bounds Read lead to application crashes or information leakage in ELF parsing.

High · published January 24, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

elfspirit is an ELF static analysis and injection framework that parses, manipulates, and camouflages ELF files. When analyzing the ELF file format in versions prior to 1.1, there is an out-of-bounds read bug, which can lead to application crashes or information leakage. By constructing a special format ELF file, the information of any address can be leaked. elfspirit version 1.1 contains a patch for this issue.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00875 · 58.6th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-01-24T19:50Z
EPSS history
Timeline
  • 24 JAN 19:50Z
    Out-of-bounds Read lead to application crashes or information leakage in ELF parsing.
    cvelistv5