CVE-2021-32495

CRITICAL

radare2 - Use-After-Free in pyc Parser get_none_object Function

Title source: llm
STIX 2.1

Description

Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

References (2)

Core 2

Scores

CVSS v3 10.0
EPSS 0.0064
EPSS Percentile 45.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-416
Status published
Products (1)
radare/radare2 5.3.0
Published Jul 07, 2023
Tracked Since Feb 18, 2026