In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg).
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 352fafe97784e81a10a7c74bd508f71a19b53c2a |