CVE-2018-11383

The rstrbuffini function in radare2 2.5.0 allows remote attackers to cause a denial of service invalid free and application crash via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/analavr.c...

CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11380

The parseimportptr function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted Mach-O file...

CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

CVE-2018-11381

The stringscanrange function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

CVE-2018-11384

The shop function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11382

CVE-2018-11382 affects radare2 (v2.5.0) and is caused by the _inst__sts() function, which allows remote attackers to trigger a heap-based out-of-bounds read, leading to an application crash (denial of service) via a crafted binary. Impact is limited to the described crash/DoS and, per the Arch Li...

CVE-2018-11383

CVE-2018-11383 affects radare2 up to version 2.5.0, where the r_strbuf_fini() function may crash the application or cause an invalid free via a crafted ELF file due to an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c. The vulnerability is confirmed across multiple sources; ...

CVE-2018-11376

The rreadle32 function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11377

The avropanalyze function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11384

The shop function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted ELF file...

CVE-2018-11383

The rstrbuffini function in radare2 2.5.0 allows remote attackers to cause a denial of service invalid free and application crash via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/analavr.c...

CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

CVE-2018-11379

The getdebuginfo function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted PE file...

CVE-2018-11380

The parseimportptr function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted Mach-O file...