CVE-2018-12320

CVE-2018-12320 affects radare2 v2.6.0. The vulnerability is a use-after-free in r_anal_bb_free() (libr/anal/bb.c) triggered by processing a crafted Java binary file, described as a post-release reuse issue in multiple sources. Public records confirm the affected component and the underlying cause...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...