OSV-2021-1500

    Dashboard / Vulnerabilities / OSV-2021-1500

    OSV-2021-1500

    Published: 28 Oct 2021Last Modified: 25 Aug 2022

    Summary: Heap-buffer-overflow in parse_microsoft_mangled_name

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40342 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: parse_microsoft_mangled_name microsoft_demangle r_bin_demangle_msvc ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=40342

    Affected packages

    Package

    Name: radare2

    Purl: pkg:generic/radare2

    Affected ranges

    Type: GIT

    Events:

    Introduced- 775f2b3d8d6d44f3312f9911dcf70b203268f387
    Fixed -a31394b39e6194a8ecd6c83e53c658f704a315fb

    Affected versions

    4.4.0

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-1500 | CVE-DB