radare2 heap out-of-bounds read vulnerability

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A heap out-of-bounds read vulnerability exists in javaswitchop in libr/anal/p/analjava.c in radare2 2.6.0. An...

PT-2018-11121

Name of the Vulnerable Software and Affected Versions radare2 version 2.6.0 Description The issue is a heap out of bounds read in the java switch op function, located in anal java.c, which can be triggered by a crafted Java binary file. Recommendations For radare2 version 2.6.0, update to a newer...