PT-2023-27217 · Rizin · Rizin

Ifygecko · Published 2023-08-24 · Updated 2023-08-30 · CVE-2023-40022

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rizin versions 0.6.0 and prior

Description The issue is related to an integer overflow in the consume count function of src/gnu v2/cplus-dem.c. This overflow occurs because the compiler considers a block of code as unreachable due to a prior multiplication statement, assuming the count will always be a multiple of 10. As a result, the overflow check, although valid, is missing the modulus if the block is compiled.

Recommendations For versions 0.6.0 and prior, update to version 0.6.1 to resolve the issue. As a temporary workaround, consider disabling C++ demangling using the configuration option bin.demangle=false.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2023-40022

GHSA-92H6-WWC2-53CQ

Affected Products

Rizin

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40022.json · Exploit
• https://github.com/rizinorg/rizin/pull/3753 · Patch
• https://github.com/rizinorg/rizin/security/advisories/GHSA-92h6-wwc2-53cq · Vendor Advisory
• https://github.com/rizinorg/rz-libdemangle/commit/51d016750e704b27ab8ace23c0f72acabca67018 · Patch
• https://github.com/rizinorg/rz-libdemangle/pull/54 · Patch
• https://osv.dev/vulnerability/CVE-2023-40022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40022 · Security Note
• https://github.com/rizinorg/rz-libdemangle/blob/main/src/gnu_v2/cplus-dem.c#L419 · Note
• https://t.me/cibsecurity/69171 · Telegram Post