CVE-2023-46569

An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h

Critical · published October 28, 2023

CVSS v3.1
9.8
EPSS
1%
Percentile
59.8
In the wild
Unconfirmed
What it is

🔥 An out-of-bounds read in radare2 can expose sensitive data without breaking a sweat! Think of it like a chef accidentally peeking into an unmarked recipe book that shouldn't be accessed — a quick glance could reveal secrets that shouldn’t be shared! An attacker could exploit this vulnerability to read sensitive information from memory, potentially leaking critical data or system secrets. This could lead to serious security breaches, making it a developer's nightmare!

Put simply

Think of it like a chef accidentally peeking into an unmarked recipe book that shouldn't be accessed — a quick glance could reveal secrets that shouldn’t be shared! This out-of-bounds read occurs in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h, allowing unauthorized access to data beyond allocated buffers.

What to do

An attacker could exploit this vulnerability to read sensitive information from memory, potentially leaking critical data or system secrets. This could lead to serious security breaches, making it a developer's nightmare! Update radare2 to version 5.8.10 or later immediately to eliminate this vulnerability. Conduct a security audit of your applications using affected versions to ensure no sensitive data has been compromised. You've got this! Patch up and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00917 · 59.8th percentile
Published
2023-10-28T00:00Z
EPSS history
Timeline
  • 28 OCT 00:00Z
    An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h
    cvelistv5