Vulnerabilities > Radare > Radare2 > 2.6.0

DATE CVE VULNERABILITY TITLE RISK
2018-12-04 CVE-2018-19843 Out-of-bounds Read vulnerability in Radare Radare2
opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
local
low complexity
radare CWE-125
5.5
2018-12-04 CVE-2018-19842 Out-of-bounds Read vulnerability in Radare Radare2
getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
local
low complexity
radare CWE-125
5.5
2018-09-12 CVE-2018-15834 Out-of-bounds Write vulnerability in Radare Radare2
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
local
low complexity
radare CWE-787
5.5
2018-06-13 CVE-2018-12322 Out-of-bounds Read vulnerability in Radare Radare2 2.6.0
There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file.
local
low complexity
radare CWE-125
5.5
2018-06-13 CVE-2018-12321 Out-of-bounds Read vulnerability in Radare Radare2 2.6.0
There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file.
local
low complexity
radare CWE-125
7.8
2018-06-13 CVE-2018-12320 Use After Free vulnerability in Radare Radare2 2.6.0
There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.
local
low complexity
radare CWE-416
7.8