Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
radare2 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-28071
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
Radare Radare2 5.4.2
Radare Radare2 5.4.0
NA
CVE-2022-28069
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
Radare Radare2 5.4.2
Radare Radare2 5.4.0
NA
CVE-2022-28068
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
Radare Radare2 5.4.2
Radare Radare2 5.4.0
NA
CVE-2022-28070
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
Radare Radare2 5.4.2
Radare Radare2 5.4.0
NA
CVE-2022-28072
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
Radare Radare2 5.4.2
Radare Radare2 5.4.0
NA
CVE-2022-28073
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
Radare Radare2 5.4.2
Radare Radare2 5.4.0
NA
CVE-2023-1605
Denial of Service in GitHub repository radareorg/radare2 before 5.8.6.
Radare Radare2
383
VMScore
CVE-2018-20457
In radare2 up to and including 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows malicious users to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in arma...
Radare Radare2
445
VMScore
CVE-2021-4021
A vulnerability was found in Radare2 in versions before 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.
Radare Radare2
605
VMScore
CVE-2019-16718
In radare2 prior to 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fi...
Radare Radare2
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
deserialization
CVE-2024-4040
cross-site scripting
CVE-2023-25790
CVE-2024-2961
XML external entity
CVE-2024-26926
CVE-2024-32806
CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »