← Back

Radare

radare

172 CVEs • 3 products

Products (3)

Click to collapse
Toggle
Radare2
radare2
Radare2 Extras
radare2-extras

CVEs (172)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Radare
1Radare2
May 13, 2026
Jun 19, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
1Radare
1Radare2
May 13, 2026
Jun 8, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX file.
1Radare
1Radare2
May 13, 2026
Apr 18, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.
1Radare
1Radare2
May 13, 2026
Apr 13, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
1Radare
1Radare2
May 13, 2026
Apr 12, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
1Radare
1Radare2
May 13, 2026
Apr 3, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impa...Show more
The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.Show less
1Radare
1Radare2
May 13, 2026
Apr 3, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafte...Show more
The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted binary file.Show less
1Radare
1Radare2
May 13, 2026
Mar 27, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file.
1Radare
1Radare2
May 13, 2026
Mar 2, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DEX file.
1Radare
1Radare2
May 13, 2026
Mar 2, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file.
1Radare
1Radare2
May 13, 2026
Mar 2, 2017
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a craf...Show more
The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.Show less
1Radare
1Radare2
May 13, 2026
Feb 24, 2017
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by the r_...Show more
The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted binary file, as demonstrated by the r_read_le32 function.Show less