Browse CVEs

MEDIUM 5.5 CVE-2018-19843 opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly da… Radare2 3.1.1+ Fix from $1,6002018-12-04 MEDIUM 5.5 CVE-2018-15834 In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted fli… Radare2 2.9.0+ Fix from $1,6002018-09-12 MEDIUM 5.5 CVE-2018-14015 The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via… Radare2 after 2.7.0 Fix from $1,6002018-07-12 MEDIUM 5.5 CVE-2018-14016 The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-… Radare2 Patch available Fix from $1,6002018-07-12 MEDIUM 5.5 CVE-2018-14017 The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer … Radare2 Patch available Fix from $1,6002018-07-12 HIGH 7.8 CVE-2018-12320 There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file. Radare2 Patch available Fix from $1,9502018-06-13 HIGH 7.8 CVE-2018-12321 There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file. Radare2 Patch available Fix from $1,9502018-06-13 MEDIUM 5.5 CVE-2018-12322 There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. Radare2 Patch available Fix from $1,6002018-06-13 HIGH 7.8 CVE-2018-11378 The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file. Radare2 Patch available Fix from $1,9502018-05-22 MEDIUM 5.5 CVE-2018-11375 The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash)… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11376 The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11377 The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application cr… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11379 The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application cr… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11380 The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application … Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11381 The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11382 The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash)… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11383 The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted… Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-11384 The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via … Radare2 Patch available Fix from $1,6002018-05-22 MEDIUM 5.5 CVE-2018-10186 In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulner… Radare2 No fix yet Fix from $1,6002018-04-17 MEDIUM 5.5 CVE-2018-10187 In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this … Radare2 No fix yet Fix from $1,6002018-04-17 MEDIUM 5.5 CVE-2018-8808 In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerabili… Radare2 No fix yet Fix from $1,6002018-03-20 MEDIUM 5.5 CVE-2018-8809 In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerabili… Radare2 No fix yet Fix from $1,6002018-03-20 MEDIUM 5.5 CVE-2018-8810 In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vul… Radare2 No fix yet Fix from $1,6002018-03-20 MEDIUM 5.5 CVE-2017-16805 In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, … Radare2 Patch available Fix from $1,6002017-11-13 HIGH 7.8 CVE-2017-16357 In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/el… Radare2 Patch available Fix from $1,9502017-11-01 HIGH 7.8 CVE-2017-16358 In radare 2.0.1, an out-of-bounds read vulnerability exists in string_scan_range() in libr/bin/bin.c when doing a string search. Radare2 Patch available Fix from $1,9502017-11-01 MEDIUM 5.5 CVE-2017-16359 In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c. Radare2 Patch available Fix from $1,6002017-11-01 HIGH 7.8 CVE-2017-15931 In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/fo… Radare2 Patch available Fix from $1,9502017-10-27 HIGH 7.8 CVE-2017-15932 In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/for… Radare2 Patch available Fix from $1,9502017-10-27 HIGH 7.8 CVE-2017-15385 The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_… Radare2 Patch available Fix from $1,9502017-10-16