CyberRota Analysis
AI-GeneratedThe binary property-list Unicode parser in radare2 versions prior to 6.2.0 is vulnerable due to improper handling of uninitialized UTF-8 destinations, which can lead to the disclosure of uninitialized or adjacent heap contents when processing untrusted binary property-list data. This vulnerability may result in unintended information leakage or process termination when executing specific commands. Users of radare2, particularly those working with untrusted data, should prioritize upgrading to version 6.2.0 to mitigate these risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The vulnerability is triggered by running the explicit pFB or pFBj commands on untrusted binary property-list data. The json encoder treated the converted data as a nul-terminated c string and could continue reading beyond the allocation. This can cause disclosure of uninitialized or adjacent heap contents in JSON output and possible process termination. This issue is fixed in version 6.2.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)