CVE-2020-23907

Name of the Vulnerable Software and Affected Versions: retdec version 3.3

Description: An issue in the canSplitFunctionOn() function of ir modifications.cpp can cause a heap buffer overflow, leading to a possible out of bounds read. The impact of this issue includes Deny of Service, Memory Disclosure, and Possible Code Execution.

Recommendations: For retdec version 3.3, consider applying a patch or fix to address the heap buffer overflow issue in the canSplitFunctionOn() function to prevent potential Deny of Service, Memory Disclosure, and Possible Code Execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.