Buffer Overflow Affecting rizinorg/rizin package, versions [,0.7.0)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UNMANAGED-RIZINORGRIZIN-8502189
- published13 Dec 2024
- disclosed12 Dec 2024
- creditLazymio
Introduced: 12 Dec 2024
NewCVE-2024-31670 (opens in a new tab)Common Vulnerabilities and Exposures (CVE) are common identifiers for publicly known security vulnerabilities
Common Weakness Enumeration (CWE) is a category system for software weaknesses
How to fix?
Upgrade rizinorg/rizin to version 0.7.0 or higher.
Overview
Affected versions of this package are vulnerable to Buffer Overflow via the create_cache_bins, read_cache_accel, and rz_dyldcache_new_buf functions in the dyldcache.c file. An attacker can execute arbitrary code by supplying a specially crafted input that triggers a buffer overflow.