Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
radare radare2 vulnerabilities and exploits
(subscribe to this query)
5.5
CVSSv3
CVE-2018-20455
In radare2 before 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow malicious users to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.
Radare Radare2
5.5
CVSSv3
CVE-2018-20456
In radare2 before 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow malicious users to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455.
Radare Radare2
5.5
CVSSv3
CVE-2018-20458
In radare2 before 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow malicious users to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.
Radare Radare2
5.5
CVSSv3
CVE-2018-20459
In radare2 up to and including 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows malicious users to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and ...
Radare Radare2
5.5
CVSSv3
CVE-2022-1244
heap-buffer-overflow in GitHub repository radareorg/radare2 before 5.6.8. This vulnerability is capable of inducing denial of service.
Radare Radare2
5.5
CVSSv3
CVE-2022-1283
NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 before 5.6.8. This vulnerability allows malicious users to cause a denial of service (application crash).
Radare Radare2
5.5
CVSSv3
CVE-2018-19842
getToken in libr/asm/p/asm_x86_nz.c in radare2 prior to 3.1.0 allows malicious users to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
Radare Radare2
5.5
CVSSv3
CVE-2018-15834
In radare2 prior to 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
Radare Radare2
7.8
CVSSv3
CVE-2022-4398
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 before 5.8.0.
Radare Radare2
7.8
CVSSv3
CVE-2019-16718
In radare2 prior to 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to an insufficient fi...
Radare Radare2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »