| Package | Affected versions | Patched versions |
|---|---|---|
| radare2 | ≤ 3.5.1 |
In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free