CVE-2021-22545

—

CVSS 3.1

7.8 high

EPSS

<1%p11

Published

Jun 29, 2021 (Jun 29, 2021)

Modified

Jun 17, 2026

Description

An attacker can craft a specific IdaPro *.i64 file that will cause the BinDiff plugin to load an invalid memory offset. This can allow the attacker to control the instruction pointer and execute arbitrary code. It is recommended to upgrade BinDiff 7

Vendors: google
Products: bindiff
Weakness: CWE-416
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.