Radare

radare

181 CVEs • 3 products

Products (3)

Click to collapse

Toggle

CVEs (181)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-0712 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 22, 2022 N/A· v4 5.5 MEDIUM· v3 7.1 HIGH· v2 NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.
CVE-2022-0676 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 22, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
CVE-2022-0559 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 16, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0523 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0522 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
CVE-2022-0521 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0520 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Use After Free in NPM radare2.js prior to 5.6.2.
CVE-2022-0519 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0518 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
CVE-2022-0139 1Radare 1Radare2 Jun 17, 2026 Feb 8, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
CVE-2022-0419 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Feb 1, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
CVE-2022-0173 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Jan 11, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 radare2 is vulnerable to Out-of-bounds Read
CVE-2021-3673 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Aug 2, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS.
CVE-2020-24133 1Radare 1Radare2 Extras Jun 17, 2026 Jul 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.
CVE-2021-32613 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 May 14, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
CVE-2020-17487 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Aug 11, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECUR...Show more radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c. This is due to a malformed object identifier in IMAGE_DIRECTORY_ENTRY_SECURITY.Show less
CVE-2020-16269 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Aug 3, 2020 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parse_typedef in type_dwarf.c via a malformed DW_AT_name in the .debug_info section.
CVE-2020-15121 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Jul 20, 2020 N/A· v4 9.6 CRITICAL· v3 6.8 MEDIUM· v2 In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The she...Show more In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned in the current directory.Show less
CVE-2019-19647 2Fedoraproject Radare 2Fedora Radare2 Jun 17, 2026 Dec 9, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (a...Show more radare2 through 4.0.0 lacks validation of the content variable in the function r_asm_pseudo_incbin at libr/asm/asm.c, ultimately leading to an arbitrary write. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted input.Show less
CVE-2019-19590 1Radare 1Radare2 Jun 17, 2026 Dec 5, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which c...Show more In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted input.Show less

Previous 1...567...10 Next