Description (CNA)
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The patch is named cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87. To fix this issue, it is recommended to deploy a patch.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| radareorg / radare2 | affected 6.1.0; affected 6.1.1; affected 6.1.2; affected 6.1.3; affected 6.1.4; affected 6.1.5; affected 6.1.6 |
CWE
CWE-122, CWE-119
References
- https://vuldb.com/vuln/376348
- https://vuldb.com/vuln/376348/cti
- https://vuldb.com/cve/CVE-2026-14759
- https://vuldb.com/submit/850383
- https://github.com/radareorg/radare2/issues/26043
- https://github.com/radareorg/radare2/commit/cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87
- https://github.com/radareorg/radare2/
ADP enrichment
No English description supplied.
No references supplied.