QwikSec

Security Database

CVE

CWE

Training

CVE-2019-19647

Published: Dec 9, 2019

Modified: Aug 5, 2024

PUBLISHED

Description

radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://github.com/radareorg/radare2/issues/15545

x_refsource_MISC

FEDORA-2020-4a3ff78ba5

vendor-advisory

x_refsource_FEDORA

FEDORA-2020-acd8cdb08d

vendor-advisory

x_refsource_FEDORA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.