Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2024-11858

Radare2: command injection via pebble application files in radare2

Description

A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

radare2

Default version status: unaffected

  • 0.9.7 to < 5.9.9affected

References