CVE-2021-3674

State: Published
Severity: 7.8 High
Published: Mar 24, 2023
Updated: Feb 25, 2025
Reserved: Aug 2, 2021

Description

A flaw was found in rizin. The create_section_from_phdr function allocates space for ELF section data by processing the headers. Crafted values in the headers can cause out of bounds reads, which can lead to memory corruption and possibly code execution through the binary object's callback function.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-119
CWE-125 Out-of-bounds Read

Affected Products

Product	Versions
rizinn/a	affected rizin after version v0.2.1 until commit 1e0c34946dddf9b8e5e63933aefacf2b26d08103Affected

References

https://github.com/rizinorg/rizin/pull/1313
https://gist.github.com/netspooky/61101e191afee95feda7dbd2f6b061c4

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.