Null pointer dereference

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

Heap overflow

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

Double free

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

Double free

A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...

UBUNTU-CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

UBUNTU-CVE-2022-28069

A heap buffer overflow in vaxopfunction in radare2 5.4.2 and 5.4.0...

UBUNTU-CVE-2022-28071

A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...

CVE-2022-28068

CVE-2022-28068 affects radare2 5.4.0 and 5.4.2, due to a heap overflow in the r_sleb128 function. The vulnerability is confirmed by multiple sources in connected docs; a practical workaround is to disable the r_sleb128 function for versions 5.4.0–5.4.2 until a patch is released (per PT-2023-12931...

CVE-2022-28070

CVE-2022-28070 describes a null pointer dereference in radare2's __core_anal_fcn function affecting versions 5.4.0 and 5.4.2. The underlying issue is a null pointer dereference in core_anal_fcn. Reported impact per CVSS is high with availability impact; explicit exploitation details are not provi...

PT-2023-12932 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.4.0 through 5.4.2 Description: A heap buffer overflow issue exists in the vax opfunction of radare2. Recommendations: For versions 5.4.0 through 5.4.2, at the moment, there is no information about a newer version that...

radare2 缓冲区错误漏洞

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the vaxopfunction method...

CVE-2022-28069

CVE-2022-28069 affects radare2, specifically heap overflow in vax_opfunction for versions 5.4.0 and 5.4.2. Root cause reported as a heap buffer overflow in the vax_opfunction function. Public references consistently describe this vulnerability in radare2 5.4.0/5.4.2; no explicit fix version is pr...

CVE-2022-28073

Radare2 contains a use-after-free in the r_reg_set_value function affecting versions 5.4.0 and 5.4.2. The issue is described as a post-release reuse problem in r_reg_set_value, with no publicly documented fix in the provided sources. Exploit details, affected platforms, and remediation steps are ...

CVE-2022-28073

A use after free in rregsetvalue function in radare2 5.4.2 and 5.4.0...

CVE-2022-28071

A use after free in rreggetnameidx function in radare2 5.4.2 and 5.4.0...

CVE-2022-28070

A null pointer deference in coreanalfcn function in radare2 5.4.2 and 5.4.0...

CVE-2022-28068

A heap buffer overflow in rsleb128 function in radare2 5.4.2 and 5.4.0...

PT-2023-12934 · Radare2 · Radare2

Name of the Vulnerable Software and Affected Versions: radare2 versions 5.4.0 through 5.4.2 Description: The issue is related to a use after free in the r reg get name idx function. Recommendations: For versions 5.4.0 and 5.4.2, update to a version that fixes the use after free issue in the r reg...

radare2 代码问题漏洞

radare2 is a set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a null pointer dereference issue in the coreanalfcn method...