CVE-2017-15368

2017-10-1601:29:01

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.8%

JSON

The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call.

CPENameOperatorVersion
radare2eqradare2-windows-nightly
radare2eq0.8.8
radare2eq0.10.4
radare2eq0.9.8-rc1
radare2eq1.2.0-git
radare2eq0.10.4-termux4
radare2eq1.3.0-git
radare2eq0.10.3
radare2eq1.0.1
radare2eq2.0.0

Name	Operator	Version
radare2	eq	radare2-windows-nightly
radare2	eq	0.8.8
radare2	eq	0.10.4
radare2	eq	0.9.8-rc1
radare2	eq	1.2.0-git
radare2	eq	0.10.4-termux4
radare2	eq	1.3.0-git
radare2	eq	0.10.3
radare2	eq	1.0.1
radare2	eq	2.0.0