Vulnerabilities > Radare > Radare2 > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2018-05-22 | CVE-2018-11381 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. | 5.5 |
| 2018-05-22 | CVE-2018-11380 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file. | 5.5 |
| 2018-05-22 | CVE-2018-11379 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file. | 5.5 |
| 2018-05-22 | CVE-2018-11377 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. | 5.5 |
| 2018-05-22 | CVE-2018-11376 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file. | 5.5 |
| 2018-05-22 | CVE-2018-11375 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. | 5.5 |
| 2018-04-17 | CVE-2018-10187 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). | 5.5 |
| 2018-04-17 | CVE-2018-10186 | Out-of-bounds Read vulnerability in Radare Radare2 2.5.0 In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). | 5.5 |
| 2018-03-20 | CVE-2018-8810 | Out-of-bounds Read vulnerability in Radare Radare2 2.4.0 In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. | 5.5 |
| 2018-03-20 | CVE-2018-8809 | Out-of-bounds Read vulnerability in Radare Radare2 2.4.0 In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. | 5.5 |