cve/2017/CVE-2017-16357.md
2024-06-18 02:51:15 +02:00

734 B

CVE-2017-16357

Description

In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory.

POC

Reference

Github

No PoCs found on GitHub currently.