Vulnerabilities > Radare > Radare2
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-06-13 | CVE-2018-12322 | Out-of-bounds Read vulnerability in Radare Radare2 2.6.0 There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. | 5.5 |
| 2018-06-13 | CVE-2018-12321 | Out-of-bounds Read vulnerability in Radare Radare2 2.6.0 There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file. | 7.8 |
| 2018-06-13 | CVE-2018-12320 | Use After Free vulnerability in Radare Radare2 2.6.0 There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file. | 7.8 |
| 2018-05-22 | CVE-2018-11384 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file. | 5.5 |
| 2018-05-22 | CVE-2018-11383 | Use of Uninitialized Resource vulnerability in Radare Radare2 2.5.0 The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c. | 5.5 |
| 2018-05-22 | CVE-2018-11382 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. | 5.5 |
| 2018-05-22 | CVE-2018-11381 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. | 5.5 |
| 2018-05-22 | CVE-2018-11380 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file. | 5.5 |
| 2018-05-22 | CVE-2018-11379 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file. | 5.5 |
| 2018-05-22 | CVE-2018-11378 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Radare Radare2 2.5.0 The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file. | 7.8 |