Files
CVEs-PoC/2017/CVE-2017-16357.md
2025-09-29 21:09:30 +02:00

745 B

CVE-2017-16357

Description

In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory.

POC

Reference

Github

No PoCs found on GitHub currently.