CyberRota Analysis
AI-GeneratedA heap-based buffer overflow vulnerability exists in the RBinJava Line Number Table Parser of radareorg radare2 versions up to 6.1.6, specifically within the function r_bin_java_inner_classes_attr_calc_size. This flaw requires local access to exploit and could potentially lead to unauthorized code execution. Users of affected Java products should prioritize applying the available patch to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The patch is named cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87. To fix this issue, it is recommended to deploy a patch.
Related CVEs
Other vulnerabilities affecting the same vendor(s)