Denial Of Service (DoS)

radare2 is vulnerable to denial of service. The vulnerability exists in analfcndata function in cmdanal.c due to a memory corruption which allows an attacker to cause an application crash...

CVE-2020-27795

A segmentation fault was discovered in radare2 with adf command. In libr/core/cmdanal.c, when command "adf" has no or wrong argument, analfcndata core, input + 1 -- RAnalFunction fcn = ranalgetfcnin core-anal, core-offset, -1; returns null pointer for fcn causing segmentation fault later in...