Vulnerability Details : CVE-2018-12320
There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.
Vulnerability category: Memory Corruption
Products affected by CVE-2018-12320
- cpe:2.3:a:radare:radare2:2.6.0:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-12320
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 34 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-12320
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
6.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:P |
8.6
|
6.4
|
NIST | |
7.8
|
HIGH | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
1.8
|
5.9
|
NIST |
CWE ids for CVE-2018-12320
-
The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2018-12320
-
https://github.com/radare/radare2/issues/10293
Use-after-free in r_anal_bb_free() · Issue #10293 · radare/radare2 · GitHubIssue Tracking;Third Party Advisory
-
https://github.com/radare/radare2/commit/90b71c017a7fa9732fe45fd21b245ee051b1f548
Fix #10293 - Use-after-free in r_anal_bb_free() · radare/radare2@90b71c0 · GitHubPatch;Third Party Advisory
Jump to