漏洞概述 漏洞名称: Out-of-bounds read in 漏洞编号: #26043 漏洞类型: 堆缓冲区溢出 漏洞描述: 函数 在 中可以读取超过 属性缓冲区末尾的数据。该函数接受一个6字节的缓冲区，将其内部偏移量推进到6，然后读取一个 在 。读取需要字节6和7，但提供的分配只有索引0到5有效。ASAN报告在 处发生堆缓冲区溢出。 影响范围 受影响文件: 受影响函数: 修复方案 修复状态: 已修复 修复提交: 仓库中的 commit 修复内容: 修复了 函数中的2字节越界读取问题。 POC代码 ```bash 复制此脚本到你的shell中，并用输出替换它 date f2 -v uname -ms PoC: line_number_table_oob_harness.c run_harness.sh Reproductor: ROOT="$PWD" curl -LO https://raw.githubusercontent.com/Bin-Infinit/vuln-validations/main/radare2/target/case-015/pocs/line_num... clang -I"$ROOT" -I"$ROOT/shlr/java" -I"$ROOT/shlr/asm" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/java" -I"$ROOT/shlr/asm" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$ROOT/shlr/asm/include" -I"$