In radare2 up to and including 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote malicious users to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg).
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
radare radare2 |
||
fedoraproject fedora 29 |
||
fedoraproject fedora 30 |
Vulmon