An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://github.com/radareorg/radare2/issues/22334 | exploit |
https://gist.github.com/gandalf4a/afeaf8cc958f95876f0ee245b8a002e8 | third party advisory exploit |