Skip to content
OpenAdvisories
High · 7.5 CVE-2021-22545 EUVD-2021-9686GHSA-958m-4rv5-24cm

Use-after-free in BinDiff

Published Jun 29, 2021 · Updated Sep 16, 2024 · Assigned by Google

Description

An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7

Affected products

VendorProductAffectedFixed
Google Bindiff unspecified – < 7.0 7.0

References