CVEs (170)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. |
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. |
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. |
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. |
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. |
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. |
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. |
2Fedoraproject Radare2Fedora Radare2Jun 17, 2026 Aug 14, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
|
Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.
|
Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6. |
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. |
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2. |
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. |
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0. |
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->ana...Show more |
A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash. |
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack. |
Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary...Show more |