Vulnerability · Published Dec 13, 2021 · Assigned by GitHub_M

CVE-2021-43814Heap-based OOB write when parsing dwarf DIE info in Rizin

High 7.7

In plain English

A high-severity out-of-bounds write in rizin from rizinorg. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).

Severity (CVSS 3.1)7.7High

Exploit odds (30 days)0.9%top 40.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Rizin is a UNIX-like reverse engineering framework and command-line toolset. In versions up to and including 0.3.1 there is a heap-based out of bounds write in parse_die() when reversing an AMD64 ELF binary with DWARF debug info. When a malicious AMD64 ELF binary is opened by a victim user, Rizin may crash or execute unintended actions. No workaround are known and users are advised to upgrade.

Affected products (as reported)

Vendor	Product	Versions
rizinorg	rizin	<= 0.3.1

Weakness: CWE-787 · Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

References

https://github.com/rizinorg/rizin/security/advisories/GHSA-hqqp-vjcm-mw8r x_refsource_CONFIRM
https://github.com/rizinorg/rizin/issues/2083 x_refsource_MISC
https://github.com/rizinorg/rizin/commit/aa6917772d2f32e5a7daab25a46c72df0b5ea406 x_refsource_MISC