CVE-2021-32495: Use After Free
Published Jul 7, 2023
·Updated
Radare2 has a use-after-free vulnerability in pyc parser's getnoneobject function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
Affected Software
1 affected component
Radare Radare2=5.3.0
Remediation
Patch Available
Event History
Jul 7, 2023
CVE Published
via MITRE·06:27 PM
Data Sourced
via MITRE·06:27 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-32495.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Radare2 has a use-after-free vulnerability in pyc parser s get_none_object function.'
3
What is the severity of CVE-2021-32495?
The severity of CVE-2021-32495 is critical with a CVSS score of 9.1.
4
How does the vulnerability in Radare2 occur?
The vulnerability in Radare2 occurs due to a use-after-free vulnerability in the pyc parser's get_none_object function.
5
What is the impact of the CVE-2021-32495 vulnerability?
The vulnerability allows attackers to read freed memory, which can lead to a denial of service (DoS) attack.