UBUNTU-CVE-2026-14759

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...

EUVD-2026-41769

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function rbinjavainnerclassesattrcalcsize of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack...

CVE-2026-14759

radare2 (radareorg) up to version 6.1.6 is affected by CVE-2026-14759 in the RBinJava Line Number Table Parser. The vulnerability is located in function r_bin_java_inner_classes_attr_calc_size (file shlr/java/class.c) and leads to a heap-based buffer overflow when a manipulation is performed. The...

PT-2026-55809

Name of the Vulnerable Software and Affected Versions radareorg radare2 versions prior to 6.1.7 Description A heap-based buffer overflow occurs in the RBinJava Line Number Table Parser component within the r bin java inner classes attr calc size function located in the shlr/java/class.c file. Thi...

radare2 denial of service vulnerability (CNVD-2018-13276)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability in the 'rbinjavaannotationnew' function in the shlr/java/class.c file in radare2 version 2.7.0 stems from a lack of input validation in the rbinjavalinenumbertable missing input validation in attrnew. ...

UBUNTU-CVE-2018-14017

The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted .class file because of missing input validation in rbinjavalinenumbertableattrnew...