Heap-based Buffer Overflow

radare2, edge is vulnerable to heap based buffer overflow. The vulnerability is due to multiple out-of-bounds writes in marshal.c , which allows an attacker to crash the application...

Null pointer dereference

The v9fsiovvunmarshal function in fsdev/9p-iov-marshal.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service NULL pointer dereference and QEMU process crash by sending an empty string parameter to a 9P operation...