CVE-2020-24133

Critical

Description

A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.

SeverityCritical
CVSS9.8
Exploit probability—
ProductRadare2-extras
PublishedJul 14, 2021
First seenJul 14, 2021

How to fix

Update
  • radare radare2-extras5.1.0 or later

Affected products

ProductAffected versionsFixed in
radare radare2-extrasv < 5.1.05.1.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.