Vulnerabilities > Radare > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-07-14 CVE-2020-24133 Out-of-bounds Write vulnerability in Radare Radare2-Extras
A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arbitrary code or carry out denial of service (DOS) attacks.
network
low complexity
radare CWE-787
critical
9.8
2020-07-20 CVE-2020-15121 OS Command Injection vulnerability in multiple products
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection.
network
low complexity
radare fedoraproject CWE-78
critical
9.6