Double free

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

Heap overflow

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

UBUNTU-CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12320

CVE-2018-12320 affects radare2 v2.6.0. The vulnerability is a use-after-free in r_anal_bb_free() (libr/anal/bb.c) triggered by processing a crafted Java binary file, described as a post-release reuse issue in multiple sources. Public records confirm the affected component and the underlying cause...

CVE-2018-12322

CVE-2018-12322 refers to a heap out-of-bounds read in radare2 2.6.0, triggered in _6502_op() within libr/anal/p/anal_6502.c by a crafted iNES ROM binary. The issue is documented across multiple sources (NVD, CNVD, Ubuntu/Debian trackers, Nessus/NASL, OSV, CVE list) with consistent description. Af...

CVE-2018-12321

CVE-2018-12321 affects radare2 2.6.0, where a heap out-of-bounds read occurs in java_switch_op() in libr/anal/p/anal_java.c when processing a crafted Java binary. This is documented across multiple sources (NVD, CNVD, OSV, UBUNTU, Debian and Nessus listings). The vulnerability stems from a heap o...

CVE-2018-12321

There is a heap out of bounds read in radare2 2.6.0 in javaswitchop in libr/anal/p/analjava.c via a crafted Java binary file...

CVE-2018-12322

There is a heap out of bounds read in radare2 2.6.0 in 6502op in libr/anal/p/anal6502.c via a crafted iNES ROM binary file...

CVE-2018-12320

There is a use after free in radare2 2.6.0 in ranalbbfree in libr/anal/bb.c via a crafted Java binary file...

[ASA-201806-2] radare2: multiple issues

Arch Linux Security Advisory ASA-201806-2 ========================================= Severity: High Date : 2018-06-05 CVE-ID : CVE-2018-11375 CVE-2018-11376 CVE-2018-11377 CVE-2018-11378 CVE-2018-11379 CVE-2018-11380 CVE-2018-11381 CVE-2018-11382 CVE-2018-11383 CVE-2018-11384 Package : radare2 Typ...

radare2 denial of service vulnerability (CNVD-2018-12200)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the avropanalyze function in radare2 2.5.0. A remote attacker can...

radare2 denial of service vulnerability (CNVD-2018-12203)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the shop function in radare2 2.5.0. A remote attacker can exploit...

radare2 denial of service vulnerability (CNVD-2018-12199)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the getdebuginfo function in radare2 2.5.0. A remote attacker can...

radare2 denial of service vulnerability (CNVD-2018-12201)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the rreadle32 function in radare2 2.5.0. A remote attacker can...

radare2 denial of service vulnerability (CNVD-2018-12198)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the parseimportptr function in radare2 2.5.0. A remote attacker can...

radare2 denial of service vulnerability (CNVD-2018-12206)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the stringscanrange function in radare2 2.5.0. A remote attacker ca...

radare2 denial of service vulnerability (CNVD-2018-12202)

Radare2 is a complete framework for reverse engineering and analyzing binaries, consisting of a series of small utilities that can be used together or independently of the command line. A denial of service vulnerability exists in the instlds function in radare2 2.5.0. A remote attacker can exploi...