| Package | Affected versions | Patched versions |
|---|---|---|
| radare2 | ≤ 6.1.4 |
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability through GDB remote debugging to cause a denial of service or potentially achieve code execution by manipulating thread list processing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free