CVE-2016-8390 An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially crafted ELF file can cause attacker controlled pointer arithme...
HighCVSS 7.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of Hopper Disassembler 3.11.20. A specially crafted ELF file can cause attacker controlled pointer arithmetic resulting in a partially controlled out of bounds write. An attacker can craft an ELF file with specific section headers to trigger this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cryptic-apps hopper disassembler | = 3.11.20 | No fix listed |
| Talos Hopper | = Hoppler Disassembler 3.11.20 | No fix listed |
References
- 93801 broken-link third-party-advisory vdb-entry
- www.talosintelligence.com third-party-advisory