CVE-2024-29646: Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.

Description

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.

Classification

CVE ID: CVE-2024-29646

Affected Products

Vendor: n/a

Product: n/a

Exploit Prediction Scoring System (EPSS)

EPSS Score: 0.04% (probability of being exploited)

EPSS Percentile: 12.41% (scored less or equal to compared to others)

EPSS Date: 2025-02-04 (when was this score calculated)

References

https://github.com/radareorg/radare2/pull/22562
https://github.com/radareorg/radare2/pull/22567
https://github.com/radareorg/radare2/pull/22572
https://github.com/radareorg/radare2/pull/22578
https://github.com/radareorg/radare2/pull/22599
https://gist.github.com/Crispy-fried-chicken/0be4a204e7226fa2cea761c09f027690

Timeline