CVE-2018-20458
Summary
| CVE | CVE-2018-20458 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-12-25 19:29:00 UTC |
| Updated | 2020-10-15 16:14:00 UTC |
| Description | In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file. |
Risk And Classification
Problem Types: CWE-125
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| AddressSanitizer: heap-buffer-overflow at libr/bin/format/mach0/dyldcache.c:64 · Issue #12374 · radareorg/radare2 · GitHub | MISC | github.com | Exploit, Third Party Advisory |
| Fix #12374 - oobread crash in truncated dyldcache ##bin (#12381) · radareorg/radare2@30f4c7b · GitHub | MISC | github.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.