The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/radare/radare2/commit/d2632f6483a3ceb5d8e0a5fb11142c51c43978b4 | patch third party advisory issue tracking |
https://github.com/radare/radare2/issues/7265 | patch third party advisory issue tracking |
http://www.securityfocus.com/bid/97648 | third party advisory vdb entry |