WRITEUP

WRITEUP
Exploit for CVE-2024-29645 - radarorg radare2 <5.8.8 - RCE
AI Analysis

This patch addresses an out-of-bounds write vulnerability in radare2's DWARF parsing logic, specifically when handling abbrev with a count of 0. The fix ensures proper memory allocation and bounds checking to prevent OOB writes during DIE (Debugging Information Entry) initialization and parsing.

Attack Type
DoS
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
T1210 - Exploitation of Remote Services
Loading exploit code...
Download ZIP Password: eip
Authors
Yiheng Cao
Vulnerability
CVE-2024-29645
radarorg radare2 <5.8.8 - RCE
HIGH
CVSS 7.8