CVE-2021-43814

Katalog CVE

CVSS 7.8 · High EPSS 0,87%

Kerentanan Out-of-bounds Write pada rizin. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin may crash or execute unintended actions. No workaround are known and users are advised to upgrade.

Rincian

Terbit di NVD

13 Desember 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/rizinorg/rizin/commit/aa6917772d2f32e5a7daab25a46c72df0b5ea406 patch · advisory pihak ketiga
• https://github.com/rizinorg/rizin/issues/2083 advisory pihak ketiga
• https://github.com/rizinorg/rizin/security/advisories/GHSA-hqqp-vjcm-mw8r advisory pihak ketiga