PT-2022-15058

CVE-2022-21711

Published

2022-01-24

Updated

2023-02-16

Description by

CVSS 3.1

7.1

High

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions elfspirit versions prior to 1.1

Description The issue is related to an out-of-bounds read bug in the ELF file format analysis. This bug can cause application crashes or information leakage. By constructing a specially formatted ELF file, it is possible to leak information from any address.

Recommendations For versions prior to 1.1, update to version 1.1 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Liyansong2018

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers