CVE-2018-14016

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14017

The CVE-2018-14017 entry affects radare2 (version 2.7.0) specifically the r_bin_java_annotation_new function in shlr/java/class.c. The vulnerability arises from missing input validation in r_bin_java_line_number_table_attr_new, enabling remote attackers to craft a .class file that triggers a heap...

CVE-2018-14016

The CVE-2018-14016 issue affects radare2 2.7.0, specifically the r_bin_mdmp_init_directory_entry function in mdmp.c. A crafted Mini Crash Dump file can trigger a heap-based buffer over-read, leading to an application crash (DoS). All sources consistently describe this vulnerability as a remote-tr...

CVE-2018-14016

The rbinmdmpinitdirectoryentry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and application crash via a crafted Mini Crash Dump file...

CVE-2018-14015

The vulnerability CVE-2018-14015 affects radare2 (sdb_set_internal in sdb.c, 2.7.0) and is triggered by a crafted ELF file due to missing input validation in r_bin_dwarf_parse_comp_unit (libr/bin/dwarf.c). The issue allows remote attackers to cause a denial of service (invalid read and applicatio...

radare2 heap out-of-bounds read vulnerability

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A heap out-of-bounds read vulnerability exists in javaswitchop in libr/anal/p/analjava.c in radare2 2.6.0. An...

radare2 memory misreference vulnerability

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A post-release reuse vulnerability exists in ranalbbfree in libr/anal/bb.c in radare2 2.6.0. An attacker can...

radare2 heap out-of-bounds read vulnerability (CNVD-2018-12207)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A heap out-of-bounds read vulnerability exists in 6502op in libr/anal/p/anal6502.c in radare2 2.6.0. An attacke...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

UBUNTU-CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

UBUNTU-CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

Heap overflow

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...