PT-2026-55807 · Radareorg · Radare2
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
radareorg radare2 versions prior to 6.1.7
Description
An integer overflow occurs in the hexpairs Parser component within the
cmd anal opcode() function located in the libr/core/cmd anal.inc.c file. This issue requires local access to be exploited.Recommendations
Apply patch 84e773986e7e5bb30453a9384f498ec0ccc9d0a9 to versions prior to 6.1.7.
Exploit
Fix
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Radare2