Buffer overflow

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...

Out-of-bounds

The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted DEX file...

CVE-2017-6387

The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted DEX file...

Null pointer dereference

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

CVE-2017-6319

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...

UBUNTU-CVE-2017-6415

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

CVE-2017-6415

The CVE-2017-6415 issue affects radare2 (v1.2.1) where the dex_parse_debug_item function in libr/bin/p/bin_dex.c can be triggered by a crafted DEX file to cause a NULL pointer dereference and application crash (DoS). The connected sources consistently describe the vulnerable component and impact;...

CVE-2017-6387

The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted DEX file...

CVE-2017-6319

The vulnerability CVE-2017-6319 affects radare2, specifically the dex_parse_debug_item function in libr/bin/p/bin_dex.c within version 1.2.1. A crafted DEX file can trigger a denial of service (buffer overflow and application crash) and may have unspecified impact. The connected sources consisten...

CVE-2017-6387

The dexloadcode function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted DEX file...

CVE-2017-6415

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

CVE-2017-6319

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service buffer overflow and application crash or possibly have unspecified other impact via a crafted DEX file...

CVE-2017-6415

The dexparsedebugitem function in libr/bin/p/bindex.c in radare2 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

radare2 denial of service vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexparsedebugitem' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service null pointer...

radare2 denial of service vulnerability (CNVD-2017-02721)

radare2 is an open source reverse engineering flat. A denial of service vulnerability in the dexparsedebugitem function in libr/bin/p/bindex.c in radare2 version 1.2.1 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted DEX file...

radare2 denial of service vulnerability (CNVD-2017-02720)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'dexloadcode' function in the libr/bin/p/bindex.c file in radare2 version 1.2.1. A remote attacker can exploit this vulnerability to cause a denial of service out-of-bounds read and...

Kaspersky AntiVirus - .DEX File Format Memory Corruption

Kaspersky AntiVirus - .DEX File Format Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=529 The attached testcase was found by fuzzing DEX files, and results in a heap overflow with a wild memcpy. Note that Kaspersky catch exceptions and continue...

Kaspersky AntiVirus - '.DEX' File Format Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=529 The attached testcase was found by fuzzing DEX files, and results in a heap overflow with a wild memcpy. Note that Kaspersky catch exceptions and continue execution, so running into unmapped pages doesn't terminate th...

Kaspersky AntiVirus - '.DEX' File Format Parsing Memory Corruption

Source: https://code.google.com/p/google-security-research/issues/detail?id=519 Fuzzing the DEX file format found a crash that loads a function pointer from an attacker controlled pointer, on Windows this results in a call to an unmapped address. This is obviously exploitable for remote,...

Kaspersky AntiVirus - .DEX File Format Parsing Memory Corruption

Kaspersky AntiVirus - .DEX File Format Parsing Memory Corruption Source: https://code.google.com/p/google-security-research/issues/detail?id=519 Fuzzing the DEX file format found a crash that loads a function pointer from an attacker controlled pointer, on Windows this results in a call to an...