Radare2 安全漏洞

Radare2 is a Libre reverse framework open-sourced by radare for Unix geeks. A security vulnerability exists in Radare2 versions prior to 5.9.9 that stems from a heap buffer over-read or buffer overflow...

SUSE CVE-2024-48241

An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the bfdiv function...

radare2 安全漏洞

radare2 is the radare open source set of libraries and tools for working with binaries. A security vulnerability exists in radare2 versions v5.8.0 through v5.9.4, which originated from allowing a local attacker to cause a denial of service via the bfdiv function...

UBUNTU-CVE-2023-47016

radare2 5.8.9 has an out-of-bounds read in rbinobjectsetitems in libr/bin/bobj.c, causing a crash in rreadle32 in libr/include/rendian.h...

UBUNTU-CVE-2023-46569

An out-of-bounds read in radare2 v.5.8.9 and before exists in the printinsn32fpu function of libr/arch/p/nds32/nds32-dis.h...

SUSE CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2022-28072

A heap buffer overflow in rreadle32 function in radare25.4.2 and 5.4.0...

CVE-2022-28072

The CVE-2022-28072 entry concerns a heap buffer overflow in the r_read_le32 function present in radare25.4.2 and 5.4.0. Multiple connected sources corroborate the same underlying issue affecting radare2/radare25 code paths, with the vulnerability described as a heap overflow in the targeted r_rea...

SUSE CVE-2021-32494

Radare2 has a division by zero vulnerability in Mach-O parser's rebasebuffer function. This allow attackers to create malicious inputs that can cause denial of service...

SUSE CVE-2018-20460

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service application crash caused by stack-based buffer overflow by crafting an input file...

SUSE CVE-2022-1238

Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more general description of heap buffer overflow, see CWE...

UBUNTU-CVE-2020-15121

In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current...

Exploit for Command Injection in Radare Radare2

CVE-2019-14745 weaponized radare2 vulnerability CVE-2019-1474...

radare2 'r_bin_dyldcache_extract' function heap buffer overflow vulnerability

radare2 is a set of libraries and tools for working with binary files. A heap buffer overflow vulnerability exists in the 'rbindyldcacheextract' function in the libr/bin/format/mach0/dyldcache.c file in radare2 versions prior to 3.1.1. An attacker can exploit this vulnerability to cause a denial ...

UBUNTU-CVE-2018-11375

The instlds function in radare2 2.5.0 allows remote attackers to cause a denial of service heap-based out-of-bounds read and application crash via a crafted binary file...

radare buffer overflow vulnerability (CNVD-2017-34472)

adare is a set of libraries and tools for working with binary files. A memory corruption vulnerability in the 'storeversioninfognuverdef' function and 'storeversioninfognuverneed' function in the libr/bin/format/elf/elf.c file in radare 2.0.1 originates when the program allocates memory...

Unspecified vulnerability in radare

radare is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'stringscanrange' function in the libr/bin/bin.c file in radare version 2.0.1. No details of the vulnerability are provided at this time...

radare denial of service vulnerability

radare is a set of libraries and tools for working with binary files. A security vulnerability exists in the 'storeversioninfognuverdef' function in the libr/bin/format/elf/elf.c file in radare version 2.0.1. An attacker can exploit this vulnerability to cause a denial of service crash...

CVE-2017-16357

In radare 2.0.1, a memory corruption vulnerability exists in storeversioninfognuverdef and storeversioninfognuverneed in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper shsize validation when allocating memory...