CVEvulnerability
CVE-2021-22545
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-416
Description
An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7
Affected configurations
• google bindiff (< 7.0)
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://www.zynamics.com/bindiff/manual/index.html#nyyyy7 Product, Release Notes, Vendor Advisory
- https://www.zynamics.com/bindiff/manual/index.html#nyyyy7 Product, Release Notes, Vendor Advisory