PT-2023-30095

CVE-2023-46570

Published

2023-10-27

Updated

2024-09-09

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions radare2 versions 5.8.9 and earlier

Description An out-of-bounds read exists in the print insn32 function of libr/arch/p/nds32/nds32-dis.h. This issue affects radare2 versions prior to 5.8.9.

Recommendations For versions 5.8.9 and earlier, consider disabling the print insn32 function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Gandalf4A

Vendors

Affected products

Weakness enumeration

CWE-125: Out-of-bounds Read

Related identifiers

CVE-2023-46570

ALT-PU-2024-4821