221 matches found
SUSE CVE-2024-11858
A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing...
MGASA-2024-0367 Updated radare2 packages fix security vulnerability
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the bfdiv function. CVE-2024-48241...
CVE-2023-46569
An out-of-bounds read in radare2 v.5.8.9 and before exists in the printinsn32fpu function of libr/arch/p/nds32/nds32-dis.h...
radare2 缓冲区错误漏洞
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the rsleb128 method...
radare2 资源管理错误漏洞
radare2 is a set of libraries and tools for working with binary files. radareorg A resource management error vulnerability exists in radare2 versions prior to 5.8.6, which stems from incorrectly parsing symbolic information in a COFF file, resulting in a segmentation error in at...
SUSE CVE-2022-0523
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2...
SUSE CVE-2022-1283
NULL Pointer Dereference in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service application crash...
SUSE CVE-2022-4398
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0...
UBUNTU-CVE-2022-4843
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2...
radare2 输入验证错误漏洞
radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions prior to 5.8.0 that stems from the presence of an integer overflow vulnerability...
MGASA-2022-0440 Updated radare2/rizin packages fix security vulnerability
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. CVE-2021-32613 A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS...
The vulnerability of the Radare2 reverse-engineering framework, related to access to an uninitialized pointer, allows a hacker to execute arbitrary code.
The vulnerability of the reverse-engineering framework Radare2 relates to access to an uninitialized pointer. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...
CVE-2021-44974
radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/binsymbols.c binary symbol parser...
CVE-2021-44975
radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/analobjc.c mach-o parser...
CVE-2022-1452
Out-of-bounds Read in rbinjavabootstrapmethodsattrnew function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end 2f the intented buffer. Typically, this can allow attackers to read sensitive information from other memory locations or cause a...
CVE-2022-1297
Out-of-bounds Read in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sensitive information or cause a crash...
CVE-2022-1284
heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service...
CVE-2022-1283
NULL Pointer Dereference in rbinnegetentrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service application crash...
UBUNTU-CVE-2022-1237
Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...