Vulnerabilities > Radare

DATE CVE VULNERABILITY TITLE RISK
2018-05-22 CVE-2018-11378 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Radare Radare2 2.5.0
The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file.
local
low complexity
radare CWE-119
7.8
2018-05-22 CVE-2018-11377 Out-of-bounds Read vulnerability in Radare Radare2 2.5.0
The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
local
low complexity
radare CWE-125
5.5
2018-05-22 CVE-2018-11376 Out-of-bounds Read vulnerability in Radare Radare2 2.5.0
The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.
local
low complexity
radare CWE-125
5.5
2018-05-22 CVE-2018-11375 Out-of-bounds Read vulnerability in Radare Radare2 2.5.0
The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
local
low complexity
radare CWE-125
5.5
2018-04-17 CVE-2018-10187 Out-of-bounds Read vulnerability in Radare Radare2 2.5.0
In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c).
local
low complexity
radare CWE-125
5.5
2018-04-17 CVE-2018-10186 Out-of-bounds Read vulnerability in Radare Radare2 2.5.0
In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c).
local
low complexity
radare CWE-125
5.5
2018-03-20 CVE-2018-8810 Out-of-bounds Read vulnerability in Radare Radare2 2.4.0
In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c.
local
low complexity
radare CWE-125
5.5
2018-03-20 CVE-2018-8809 Out-of-bounds Read vulnerability in Radare Radare2 2.4.0
In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c.
local
low complexity
radare CWE-125
5.5
2018-03-20 CVE-2018-8808 Out-of-bounds Read vulnerability in Radare Radare2 2.4.0
In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c.
local
low complexity
radare CWE-125
5.5
2017-11-13 CVE-2017-16805 Out-of-bounds Read vulnerability in Radare Radare2 2.0.1
In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to r_bin_dwarf_parse_comp_unit in dwarf.c and sdb_set_internal in shlr/sdb/src/sdb.c.
local
low complexity
radare CWE-125
5.5