6.8
CVSSv2

CVE-2018-12320

Published: 13/06/2018 Updated: 02/08/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

radare radare2 2.6.0

Vendor Advisories

Debian Bug report logs - #901630 radare2: CVE-2018-12320 Package: src:radare2; Maintainer for src:radare2 is Debian Security Tools <team+pkg-security@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 15 Jun 2018 19:39:02 UTC Severity: important Tags: fixed-upstream, security, upstr ...