Vulnerabilities > Radare > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-03-24 CVE-2022-1052 Out-of-bounds Write vulnerability in Radare Radare2
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
local
low complexity
radare CWE-787
5.5
2022-03-24 CVE-2022-1061 Out-of-bounds Write vulnerability in Radare Radare2
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.
network
low complexity
radare CWE-787
5.0
2022-03-22 CVE-2022-1031 Use After Free vulnerability in Radare Radare2
Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.
network
radare CWE-416
6.8
2022-03-05 CVE-2022-0849 Use After Free vulnerability in Radare Radare2
Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.
network
radare CWE-416
4.3
2022-02-24 CVE-2022-0695 Resource Exhaustion vulnerability in multiple products
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
local
low complexity
radare fedoraproject CWE-400
5.5
2022-02-23 CVE-2022-0476 Resource Exhaustion vulnerability in multiple products
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
local
low complexity
radare fedoraproject CWE-400
5.5
2022-02-22 CVE-2022-0712 NULL Pointer Dereference vulnerability in multiple products
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.
local
low complexity
radare fedoraproject CWE-476
5.5
2022-02-01 CVE-2022-0419 NULL Pointer Dereference vulnerability in multiple products
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
local
low complexity
radare fedoraproject CWE-476
5.5
2022-01-11 CVE-2022-0173 Out-of-bounds Read vulnerability in multiple products
radare2 is vulnerable to Out-of-bounds Read
local
low complexity
radare fedoraproject CWE-125
5.5
2021-05-14 CVE-2021-32613 Double Free vulnerability in multiple products
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
local
low complexity
radare fedoraproject CWE-415
5.5