2425 matches found
PT-2025-23907 · Radare2 · Radare2
Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problem was found in the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack must be approached...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework open-sourced by Radare for Unix geeks. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from memory corruption due to incorrect manipulation of the parameter -T...
Radare2 资源管理错误漏洞
Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A resource management error vulnerability exists in Radare2 version 5.9.9, which stems from a mishandling of the parameter -T by the function rconsflush in the component radare2, which could lead to reuse after release...
PT-2025-23902 · Radare2 · Radare2
Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A vulnerability has been found in the function r cons flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from the mishandling of the parameter -T by the function consstackload in the component radare2, which could lead to memory corruption...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework open-sourced by Radare for Unix geeks. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from memory corruption due to incorrect manipulation of the parameter -T...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from mishandling of the function rconspalinit in the component radare2, which could lead to memory corruption...
PT-2025-23903 · Radare2 · Radare2
Name of the Vulnerable Software and Affected Versions: Radare2 version 5.9.9 Description: A problematic vulnerability was found in Radare2, affecting the function r cons pal init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory...
Radare2 缓冲区错误漏洞
Radare2 is a Libre reverse framework open-sourced by Radare for Unix geeks. A buffer error vulnerability exists in Radare2 version 5.9.9, which stems from memory corruption due to incorrect manipulation of the parameter -T...
Fedora: Security Advisory (FEDORA-2024-658aeaa7ea)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
CVE-2022-28069
A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...
CVE-2022-28073
A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...
CVE-2022-28068
A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...
CVE-2022-28071
A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...
CVE-2020-27794
A double free issue was discovered in radare2 in cmdinfo.c:cmdinfo. Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash...
CVE-2020-27793
An off-by-one overflow flaw was found in radare2 due to mismatched array length in corejava.c. This could allow an attacker to cause a crash, and perform a denail of service attack...
CVE-2017-7716
The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...
CVE-2017-7946
The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...