Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-28072: Fix oobread crash in RAnal.hexagon (tests_64900) ##crash · radareorg/radare2@027cd9b

A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.

CVE
#vulnerability#git#buffer_overflow

Skip to content

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
  • Pricing

Search code, repositories, users, issues, pull requests…

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

  • Notifications

  • Fork 2.9k

  • Code

  • Issues 811

  • Pull requests 31

  • Discussions

  • Actions

  • Projects 27

  • Security

  • Insights

Commit

Permalink

Browse files

Browse the repository at this point in the history

Fix oobread crash in RAnal.hexagon (tests_64900) ##crash

Reported by giantbranch of NSFOCUS TIANJI Lab

  • Loading branch information

Showing 1 changed file with 4 additions and 1 deletion.

5 changes: 4 additions & 1 deletion libr/anal/p/anal_hexagon.c

Expand Up

@@ -10,8 +10,11 @@

#include “hexagon_anal.h”

static int hexagon_v6_op(RAnal *anal, RAnalOp *op, ut64 addr, const ut8 *buf, int len, RAnalOpMask mask) {

HexInsn hi = {0};;

HexInsn hi = {0};

ut32 data = 0;

if (len < 4) {

return 0;

}

data = r_read_le32 (buf);

int size = hexagon_disasm_instruction (data, &hi, (ut32) addr);

op->size = size;

Expand Down

0 comments on commit 027cd9b

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907