The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote malicious users to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of missing input validation in r_bin_java_line_number_table_attr_new.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
radare radare2 2.7.0 |
Vulmon