CVE-2021-4022 Use after free in rizin
A crafted ELF64 binary causes Rizin to crash or potentially execute code by freeing uninitialized memory during analysis.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-4022?
CVE-2021-4022 is a medium-severity use after free vulnerability in rizin, published on 25 Aug 2022. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A vulnerability was found in rizin. The bug involves an ELF64 binary for the HPPA architecture. When a specially crafted binarygets analysed by rizin, it causes rizin to crash by freeing an uninitialized (and potentially user controlled, depending on the build) memory address.
Which versions are affected by CVE-2021-4022?
It affects 1 product.
Products include Rizin Rizin.
How do I fix CVE-2021-4022?
No fix has been published for CVE-2021-4022 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2021-4022 being exploited?
There is no known exploitation of CVE-2021-4022 in the wild and no public exploit code.
Other vulnerabilities in rizin
- CVE-2024-31668 rizin before v0.6.3 is vulnerable to Improper Neutralization of Special Elements via meta_set function in librz/analysis/meta.
- CVE-2023-40022 Rizin vulnerable to Integer Overflow in C++ demangler logic
- CVE-2021-3674 Memory corruption in rizin
- CVE-2023-27590 Rizin has stack-based buffer overflow when parsing GDB registers profile files
- CVE-2022-36039 Out-of-bounds write when parsing DEX files in Rizin
Sources
Also known as GHSA-5wm3-rhr5-rwmm.