Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-28069: Fix oobread in VAX disassembler (tests_64920) ##crash · radareorg/radare2@49b0ceb

A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.

CVE
#vulnerability#git#buffer_overflow

Skip to content

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
  • Pricing

Search code, repositories, users, issues, pull requests…

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

  • Notifications

  • Fork 2.9k

  • Code

  • Issues 811

  • Pull requests 31

  • Discussions

  • Actions

  • Projects 27

  • Security

  • Insights

Commit

Permalink

Browse files

Browse the repository at this point in the history

Fix oobread in VAX disassembler (tests_64920) ##crash

Reported by giantbranch of NSFOCUS TIANJI Lab

  • Loading branch information

Showing 1 changed file with 1 addition and 1 deletion.

2 changes: 1 addition & 1 deletion libr/anal/p/anal_vax.c

Expand Up

@@ -150,7 +150,7 @@ static int vax_op(RAnal *anal, RAnalOp *op, ut64 addr, const ut8 *buf, int len,

case 0xfb: // calls

op->type = R_ANAL_OP_TYPE_CALL;

op->size = 7;

{

if (len > 6) {

int oa = 3;

ut32 delta = buf[oa];

delta |= (ut32)(buf[oa + 1]) << 8;

Expand Down

0 comments on commit 49b0ceb

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907