CVE-2022-36039
Out-of-bounds write when parsing DEX files in Rizin
Résumé
Out-of-bounds write when parsing DEX files in Rizin
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Rizin is a UNIX-like reverse engineering framework and command-line toolset. Versions 0.4.0 and prior are vulnerable to out-of-bounds write when parsing DEX files. A user opening a malicious DEX file could be affected by this vulnerability, allowing an attacker to execute code on the user's machine. A patch is available on the dev branch of the repository.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- patch github.com
- report github.com