PT-2021-23217 · Zydis · Zydis
Geeknik
·
Published
2021-11-08
·
Updated
2022-10-24
·
CVE-2021-41253
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Zydis versions v3.2.0 and older
Description
Zydis is an x86/x86-64 disassembler library. Users that use the string functions provided in
zycore to append untrusted user data to the formatter buffer within their custom formatter hooks can run into heap buffer overflows. Older versions of Zydis failed to properly initialize the string object within the formatter buffer, forgetting to initialize a few fields, leaving their value to chance. This could then in turn cause zycore functions like ZyanStringAppend to make incorrect calculations for the new target size, resulting in heap memory corruption. This does not affect the regular uncustomized Zydis formatter, because Zydis internally doesn't use the string functions in zycore that act upon these fields.Recommendations
For versions v3.2.0 and older, update to version 3.2.1 or later to patch the bug.
As a temporary workaround, users may refrain from using zycore string functions in their formatter hooks until updating to a patched version.
Exploit
Fix
Heap Based Buffer Overflow
Use of Uninitialized Resource
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Zydis