60 results · Feed
-
Medium 6.3
Access of Memory Location After End of Buffer in radareorg/radare2
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
-
High 8.8
Use After Free in radareorg/radare2
Use After Free in NPM radare2.js prior to 5.6.2.
-
Medium 6.3
Buffer Access with Incorrect Length Value in radareorg/radare2
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
-
Medium 6.3
Heap-based Buffer Overflow in radareorg/radare2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
-
High 7.1
Use After Free in radareorg/radare2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
-
High 8.8
Use After Free in radareorg/radare2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
-
Medium 5.9
NULL Pointer Dereference in radareorg/radare2
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
-
Critical 9.6
Out-of-bounds Read in radareorg/radare2
radare2 is vulnerable to Out-of-bounds Read
-
Unscored —
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can l…
-
Unscored —
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
-
Unscored —
radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidenti…
-
Unscored —
radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dw…
-
High 7.4
Command injection in Radare2
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a…
-
Unscored —
radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, u…
-
Unscored —
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at…
-
Unscored —CVE-2019-14745 Public exploit
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a craf…
-
Unscored —
In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command.
-
Unscored —
radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (applicatio…
-
Unscored —
In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remo…
-
Unscored —
In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. Th…