Radare
Page 2 of 2 — Radare CVEs from a corpus of 182, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-0713 | High | 7.1 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0712 | Medium | 5.5 | 2022-02-22 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0676 | High | 7.8 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0559 | Critical | 9.8 | 2022-02-16 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0523 | High | 7.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0522 | High | 7.1 | 2022-02-08 | Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. |
CVE-2022-0521 | High | 7.1 | 2022-02-08 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0520 | High | 7.8 | 2022-02-08 | Use After Free in NPM radare2.js prior to 5.6.2. |
CVE-2022-0519 | High | 7.1 | 2022-02-08 | Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0518 | High | 7.1 | 2022-02-08 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0139 | Critical | 9.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. |
CVE-2022-0419 | Medium | 5.5 | 2022-02-01 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. |
CVE-2022-0173 | Medium | 5.5 | 2022-01-11 | radare2 is vulnerable to Out-of-bounds Read |
CVE-2021-3673 | High | 7.5 | 2021-08-02 | A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS. |
CVE-2020-24133 | Critical | 9.8 | 2021-07-14 | A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or car… |
CVE-2021-32613 | Medium | 5.5 | 2021-05-14 | In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. |
CVE-2020-17487 | High | 7.5 | 2020-08-11 | radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to… |
CVE-2020-16269 | Medium | 5.5 | 2020-08-03 | radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the… |
CVE-2020-15121 | High | 7.4 | 2020-07-20 | In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the execut… |
CVE-2019-19647 | High | 7.8 | 2019-12-09 | radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write… |
CVE-2019-19590 | High | 7.8 | 2019-12-05 | In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow w… |
CVE-2019-16718 | High | 7.8 | 2019-09-23 | In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to ex… |
CVE-2019-14745 | High | 7.8 | 2019-08-07 | In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to ex… |
CVE-2019-12865 | Medium | 5.5 | 2019-06-17 | In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command. |
CVE-2019-12829 | High | 7.5 | 2019-06-15 | radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified ot… |
CVE-2019-12802 | High | 7.8 | 2019-06-13 | In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of servic… |
CVE-2019-12790 | High | 7.8 | 2019-06-10 | In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote attackers to cause a de… |
CVE-2018-20461 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds rea… |
CVE-2018-20460 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused b… |
CVE-2018-20459 | Medium | 5.5 | 2018-12-25 | In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of… |
CVE-2018-20458 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash cau… |
CVE-2018-20457 | Medium | 5.5 | 2018-12-25 | In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_ca… |
CVE-2018-20456 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr… |
CVE-2018-20455 | Medium | 5.5 | 2018-12-25 | In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a s… |
CVE-2018-19843 | Medium | 5.5 | 2018-12-04 | opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as dem… |
CVE-2018-19842 | Medium | 5.5 | 2018-12-04 | getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assemb… |
CVE-2018-15834 | Medium | 5.5 | 2018-09-12 | In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signatu… |
CVE-2018-14017 | Medium | 5.5 | 2018-07-12 | The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read… |
CVE-2018-14016 | Medium | 5.5 | 2018-07-12 | The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and a… |
CVE-2018-14015 | Medium | 5.5 | 2018-07-12 | The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted… |
CVE-2018-12322 | Medium | 5.5 | 2018-06-13 | There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. |
CVE-2018-12321 | High | 7.8 | 2018-06-13 | There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file. |
CVE-2018-12320 | High | 7.8 | 2018-06-13 | There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file. |
CVE-2018-11384 | Medium | 5.5 | 2018-05-22 | The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted… |
CVE-2018-11383 | Medium | 5.5 | 2018-05-22 | The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file… |
CVE-2018-11382 | Medium | 5.5 | 2018-05-22 | The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a cra… |
CVE-2018-11381 | Medium | 5.5 | 2018-05-22 | The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) vi… |
CVE-2018-11380 | Medium | 5.5 | 2018-05-22 | The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via… |
CVE-2018-11379 | Medium | 5.5 | 2018-05-22 | The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a… |
CVE-2018-11378 | High | 7.8 | 2018-05-22 | The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file. |
CVE-2018-11377 | Medium | 5.5 | 2018-05-22 | The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a… |
CVE-2018-11376 | Medium | 5.5 | 2018-05-22 | The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a cr… |
CVE-2018-11375 | Medium | 5.5 | 2018-05-22 | The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a cra… |
CVE-2018-10187 | Medium | 5.5 | 2018-04-17 | In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerabil… |
CVE-2018-10186 | Medium | 5.5 | 2018-04-17 | In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to… |
CVE-2018-8810 | Medium | 5.5 | 2018-03-20 | In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vulnerability… |
CVE-2018-8809 | Medium | 5.5 | 2018-03-20 | In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerability to caus… |
CVE-2018-8808 | Medium | 5.5 | 2018-03-20 | In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerability to caus… |
CVE-2017-16805 | Medium | 5.5 | 2017-11-13 | In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to… |
CVE-2017-16359 | Medium | 5.5 | 2017-11-01 | In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c. |
CVE-2017-16358 | High | 7.8 | 2017-11-01 | In radare 2.0.1, an out-of-bounds read vulnerability exists in string_scan_range() in libr/bin/bin.c when doing a string search. |
CVE-2017-16357 | High | 7.8 | 2017-11-01 | In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, a… |
CVE-2017-15932 | High | 7.8 | 2017-10-27 | In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/el… |
CVE-2017-15931 | High | 7.8 | 2017-10-27 | In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/e… |
CVE-2017-15385 | High | 7.8 | 2017-10-16 | The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 inval… |
CVE-2017-15368 | High | 7.8 | 2017-10-16 | The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and appl… |
CVE-2017-10929 | High | 7.8 | 2017-07-05 | The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and applic… |
CVE-2017-9949 | High | 7.8 | 2017-06-26 | The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and appl… |
CVE-2017-9763 | High | 7.5 | 2017-06-19 | The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause… |
CVE-2017-9762 | Medium | 5.5 | 2017-06-19 | The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via… |
CVE-2017-9761 | Medium | 5.5 | 2017-06-19 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application c… |
CVE-2017-9520 | Medium | 5.5 | 2017-06-08 | The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash)… |
CVE-2017-7946 | Medium | 5.5 | 2017-04-18 | The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and applicati… |
CVE-2017-7854 | Medium | 5.5 | 2017-04-13 | The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cra… |
CVE-2017-7716 | Medium | 5.5 | 2017-04-12 | The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and appl… |
CVE-2017-6448 | High | 7.8 | 2017-04-03 | The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow a… |
CVE-2017-6194 | High | 7.8 | 2017-04-03 | The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application… |
CVE-2017-7274 | Medium | 5.5 | 2017-03-27 | The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and appli… |
CVE-2017-6415 | Medium | 5.5 | 2017-03-02 | The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and a… |
CVE-2017-6387 | Medium | 5.5 | 2017-03-02 | The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application cra… |
CVE-2017-6319 | High | 7.8 | 2017-03-02 | The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and applicatio… |
CVE-2017-6197 | Medium | 5.5 | 2017-02-24 | The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and applicatio… |