2426 matches found
CVE-2023-27114
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasmdis at p/wasm/wasm.c...
CVE-2023-27114
Radare2 v5.8.3 is affected by CVE-2023-27114 due to a segmentation fault in the wasm_dis component (p/wasm/wasm.c). Connected sources consistently identify a local fault that can impact availability (high) while confidentiality and integrity remain unaffected. The provided documents do not includ...
PT-2023-20960 · Radare2 · Radare2
Name of the Vulnerable Software and Affected Versions: radare2 version 5.8.3 Description: A segmentation fault was discovered in radare2 via the component wasm dis at p/wasm/wasm.c. Recommendations: For radare2 version 5.8.3, at the moment, there is no information about a newer version that...
SUSE CVE-2017-10929
The grubmemmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted binary file, possibly related to a read overflow in the...
SUSE CVE-2018-19842
getToken in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service stack-based buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
SUSE CVE-2018-19843
opmov in libr/asm/p/asmx86nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service buffer over-read via crafted x86 assembly data, as demonstrated by rasm2...
SUSE CVE-2018-20455
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash via a stack-based buffer overflow by crafting an input file, a related issue to CVE-2018-20456...
SUSE CVE-2018-20458
In radare2 prior to 3.1.1, rbindyldcacheextract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service application crash caused by out-of-bounds read by crafting an input file...
SUSE CVE-2018-20456
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asmx86nz.c may allow attackers to cause a denial of service application crash in libr/util/strbuf.c via a stack-based buffer over-read by crafting an input file, a related issue to CVE-2018-20455...
SUSE CVE-2018-20457
In radare2 through 3.1.3, the assemble function inside libr/asm/p/asmarmcs.c allows attackers to cause a denial-of-service application crash via an rnumcalc out-of-bounds read by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is...
SUSE CVE-2018-20459
In radare2 through 3.1.3, the armassassemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service application crash by out-of-bounds read by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing i...
SUSE CVE-2018-20461
In radare2 prior to 3.1.1, coreanalbytes in libr/core/cmdanal.c allows attackers to cause a denial-of-service application crash caused by out-of-bounds read by crafting a binary file...
SUSE CVE-2020-27793
An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...
SUSE CVE-2020-27794
A double free issue was discovered in radare2 in cmdinfo.c:cmdinfo. Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash...
SUSE CVE-2020-27795
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmdanal.c, when command "adf" has no or wrong argument, analfcndata core, input + 1 -- RAnalFunction fcn = ranalgetfcnin core-anal, core-offset, -1; returns null pointer for fcn causing segmentation fault later in...
SUSE CVE-2021-3673
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS...
SUSE CVE-2021-4021
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS...
SUSE CVE-2021-32613
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS...