2426 matches found
CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
CVE-2022-28072
A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...
CVE-2022-28068
A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...
Heap overflow
A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...
Null pointer dereference
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
CVE-2022-28073
A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...
CVE-2022-28071
A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28071
A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...
Heap overflow
A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...
CVE-2022-28069
A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...
Heap overflow
A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...
Double free
A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28073
A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...
Double free
A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28069
A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28070
A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...
UBUNTU-CVE-2022-28068
A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...
CVE-2022-28070
CVE-2022-28070 describes a null pointer dereference in radare2's __core_anal_fcn function affecting versions 5.4.0 and 5.4.2. The underlying issue is a null pointer dereference in core_anal_fcn. Reported impact per CVSS is high with availability impact; explicit exploitation details are not provi...
CVE-2022-28068
CVE-2022-28068 affects radare2 5.4.0 and 5.4.2, due to a heap overflow in the r_sleb128 function. The vulnerability is confirmed by multiple sources in connected docs; a practical workaround is to disable the r_sleb128 function for versions 5.4.0–5.4.2 until a patch is released (per PT-2023-12931...
