Skip to content
OpenAdvisories
High · 8.6 CVE-2023-0302 EUVD-2023-12376GHSA-h2c6-38hv-3jwx

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2

Published Jan 15, 2023 · Updated Apr 7, 2025 · Assigned by @huntrdev

Description

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.

Affected products

VendorProductAffectedFixed
radareorg radareorg/radare2 unspecified – < 5.8.2 5.8.2

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 radare2 No fix yet —
Ubuntu 26.04 LTS radare2 No fix yet —
Ubuntu 25.10 radare2 No fix yet —
Ubuntu 16.04 LTS radare2 No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS radare2 No fix yet —
Ubuntu Pro 20.04 LTS radare2 No fix yet —
Ubuntu Pro 18.04 LTS radare2 No fix yet —
ReleasePackageFixed inAdvisory
Alpine v3.24 radare2 5.8.2-r0 —
Alpine v3.23 radare2 5.8.2-r0 —
Alpine v3.22 radare2 5.8.2-r0 —
Alpine v3.21 radare2 5.8.2-r0 —
Alpine v3.20 radare2 5.8.2-r0 —
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 radare2 5.8.2-r0 —
Alpine v3.18 radare2 5.8.2-r0 —

References