Vulnerability · Published Jul 14, 2021 · Assigned by mitre

CVE-2020-24133

Critical 9.8

In plain English

A critical-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 86% of all known vulnerabilities).

Severity (CVSS NVD)9.8Critical

Exploit odds (30 days)2.6%top 14.3% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://cwe.mitre.org/data/definitions/122.html x_refsource_MISC
https://github.com/radareorg/radare2-extras/pull/255 x_refsource_MISC
https://github.com/radareorg/radare2-extras/pull/255/commits/4a8b24475549ff10bdf6d07fd4b5f6c1cc6246ea x_refsource_MISC
https://github.com/radareorg/radare2-extras/pull/255/commits/9f6a221433964d9b14f3ed78bc9fb059395b893b x_refsource_MISC