CVE-2021-32495
CVE-2021-32495
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
CVSS 10.0 · Critical · EPSS 0.8%
- Published
- Updated
Stack: system
Affected products and versions
radare2
- Versions
- radare2 5.3.0-git 26142: Affected
No fix published
radare2 Ubuntu:16.04:LTS
- Versions
- 0.9.6-3.1ubuntu1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:18.04:LTS
- Versions
- 1.6.0+dfsg-1
- 2.0.0+dfsg-1
- 2.1.0+dfsg-1
- 2.3.0+dfsg-1
- 2.3.0+dfsg-2
- 2.3.0+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
radare2 Ubuntu:Pro:20.04:LTS
- Versions
- 3.2.1+dfsg-5build1
- 4.0.0+dfsg-1
- 4.2.1+dfsg-1
- 4.2.1+dfsg-2
- 4.2.1+dfsg-2ubuntu0.1~esm1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published