Heap overflow

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14015

The vulnerability CVE-2018-14015 affects radare2 (sdb_set_internal in sdb.c, 2.7.0) and is triggered by a crafted ELF file due to missing input validation in r_bin_dwarf_parse_comp_unit (libr/bin/dwarf.c). The issue allows remote attackers to cause a denial of service (invalid read and applicatio...