Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
rizinorg/cutter
dev @ aedf4e8
3
Fixes
2
CVEs
HIGH
Peak severity
Highlights
Command Injection: 2 prior fixes. Scrutinize any change in this area.
src/Cutter.cpp: most-fixed (1 issue). Treat as high-risk during review.
2 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Command Injection: Opening files using raw string concatenation within radare2 command strings allowed attackers to execute arbitrary shell or core commands via malicious file paths. Developers should use programmatic APIs rather than string formatting.
Remote Code Execution: An unauthenticated local TCP socket server exposing the radare2 command execution interface on port 1234 allowed arbitrary command execution. This demonstrates the risk of exposing local command pipes or sockets.
Command Injection: Constructing radare2 commands using function names to populate tooltips enabled command injection. Querying functions via their immutable numeric offsets prevents this class of injection entirely.