CVE-2024-29646

CRITICAL

radare2 5.8.8 - Buffer Overflow via Name, Type, or Group Fields

Title source: llm
STIX 2.1

Description

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.

References (6)

Core 6
Core References
Issue Tracking, Patch, Vendor Advisory
https://github.com/radareorg/radare2/pull/22562
Issue Tracking, Patch, Vendor Advisory
https://github.com/radareorg/radare2/pull/22567
Issue Tracking, Patch, Vendor Advisory
https://github.com/radareorg/radare2/pull/22572
Issue Tracking, Patch, Vendor Advisory
https://github.com/radareorg/radare2/pull/22578
Issue Tracking, Patch, Vendor Advisory
https://github.com/radareorg/radare2/pull/22599

Scores

CVSS v3 9.8
EPSS 0.0089
EPSS Percentile 55.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-120
Status published
Products (1)
radare/radare2 5.8.8
Published Dec 17, 2024
Tracked Since Feb 18, 2026