CVE-2021-32613: Use After Free
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/radare2to a version that resolves this vulnerability.Fixed in 5.3.1-r0
Event History
Frequently Asked Questions
What is the severity of CVE-2021-32613?
CVE-2021-32613 is classified as a medium severity vulnerability due to its potential for denial of service (DoS).
How do I fix CVE-2021-32613?
To fix CVE-2021-32613, upgrade radare2 to version 5.4.0 or later where the vulnerability is patched.
What causes the vulnerability in CVE-2021-32613?
The vulnerability in CVE-2021-32613 is caused by a double free in the pyc parser when handling specially crafted files.
Which versions of radare2 are affected by CVE-2021-32613?
CVE-2021-32613 affects radare2 versions up to and including 5.3.0.
Can CVE-2021-32613 lead to data loss?
CVE-2021-32613 specifically can lead to a denial of service (DoS) but does not directly cause data loss.