CVE-2018-11378

RADARE2 before version 2.6.0-1 is affected by CVE-2018-11378 due to a stack-buffer overflow in wasm_dis() in libr/asm/arch/wasm/wasm.c, which may lead to denial-of-service or other unspecified impact via a crafted WASM file. The Arch Linux advisory ASA-201806-2 documents this alongside other CVEs...

CVE-2018-10186

In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...

UBUNTU-CVE-2018-10186

In radare2 2.5.0, there is a heap-based buffer over-read in the rhexbin2str function libr/util/hex.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368...

radare2 denial of service vulnerability (CNVD-2017-36110)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the libr/bin/dwarf.c file in radare2 version 2.0.1. A remote attacker can exploit this vulnerability to cause a denial of service invalid read and application crash with the help of a special...

Design/Logic Flaw

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

CVE-2017-16805

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service invalid read and application crash via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c...

UBUNTU-CVE-2017-16358

In radare 2.0.1, an out-of-bounds read vulnerability exists in stringscanrange in libr/bin/bin.c when doing a string search...

Out-of-bounds

In radare 2.0.1, an out-of-bounds read vulnerability exists in stringscanrange in libr/bin/bin.c when doing a string search...

Memory corruption

In radare 2.0.1, a memory corruption vulnerability exists in storeversioninfognuverdef and storeversioninfognuverneed in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper shsize validation when allocating memory...

radare2 denial of service vulnerability (CNVD-2017-07214)

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'readu32leb128' function in the libr/util/uleb128.c file in radare2 version 1.3.0. A remote attacker can exploit this vulnerability to cause a denial of service heap buffer out-of-bounds...

CVE-2017-7946

The getrelocs64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service use-after-free and application crash via a crafted Mach0 file...

Heap overflow

The readu32leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Web Assembly file...