radare2 buffer overflow vulnerability (CNVD-2017-07168)

radare2 is a set of libraries and tools for working with binary files. A buffer overflow vulnerability exists in the 'consumeinitexpr' function of the wasm.c file in radare2 version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds read...

PT-2017-17956

Name of the Vulnerable Software and Affected Versions radare2 version 1.3.0 Description The issue allows remote attackers to cause a denial of service, resulting in a heap-based buffer over-read and application crash, via a crafted Web Assembly file. This is due to a problem in the consume init...