CVE-2021-32495: Use After Free
First published: Fri Jul 07 2023(Updated: )
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
Credit: patrick@puiterwijk.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Radare Radare2 | =5.3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-32495.
What is the title of the vulnerability?
The title of the vulnerability is 'Radare2 has a use-after-free vulnerability in pyc parser s get_none_object function.'
What is the severity of CVE-2021-32495?
The severity of CVE-2021-32495 is critical with a CVSS score of 9.1.
How does the vulnerability in Radare2 occur?
The vulnerability in Radare2 occurs due to a use-after-free vulnerability in the pyc parser's get_none_object function.
What is the impact of the CVE-2021-32495 vulnerability?
The vulnerability allows attackers to read freed memory, which can lead to a denial of service (DoS) attack.
- collector/nvd-index
- vendor/radare
- canonical/radare radare2
- version/radare radare2/5.3.0