CVE-2022-1240
Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2
Summary
Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2
Original description
The description as published by the source.
Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the r_str_ncpy function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see CWE.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2022-1240 radare2
References
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev