VulnerabilityModified
CVE-2021-3674
Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.
HIGH 7.8EPSS 0.41%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.41%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 0.41% probability · 35th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119, CWE-125
- Affected
- rizin/rizin
- Source
- patrick@puiterwijk.org
References
- https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4Exploit, Third Party Advisory
- https://github.com/rizinorg/rizin/pull/1313Exploit, Patch, Vendor Advisory
- https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4Exploit, Third Party Advisory
- https://github.com/rizinorg/rizin/pull/1313Exploit, Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.