cve/2022/CVE-2022-1240.md
2024-06-18 02:51:15 +02:00

940 B

CVE-2022-1240

Description

Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compiling, the program should executes into the r_str_ncpy function. Therefore I think it is very likely to be exploitable. For more general description of heap buffer overflow, see CWE.

POC

Reference

Github

No PoCs found on GitHub currently.