Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://huntr.com/bounties/bbfe1f76-8fa1-4a8c-909d-65b16e970be0 | patch third party advisory exploit |
| https://github.com/radareorg/radare2/commit/1bdda93e348c160c84e30da3637acef26d0348de | patch |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/64KUV6OGEVQ75QOV35PUVVDOJTKSJHYN/ | third party advisory mailing list |
| https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SOZ6XCADVAPAIHMVSV3FUAN742BHXF55/ | third party advisory mailing list |