Radare 2 any version

radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow

radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow

radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free

radareorg radare2 cfile.c r_core_bin_load use after free

Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2

radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, as demonstrated by newstr buffer overflows during replace operations. This affects libr/asm/asm.c and libr/parse/parse.c.

A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).

radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.

Denial of Service in radareorg/radare2

Heap Buffer Overflow in parseDragons in radareorg/radare2

heap-buffer-overflow in radareorg/radare2

heap-use-after-free in radareorg/radare2

heap-use-after-free in radareorg/radare2

NULL Pointer Dereference in radareorg/radare2

Denial of Service in radareorg/radare2

Use After Free in r_reg_get_name_idx in radareorg/radare2

Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2

Heap-based Buffer Overflow in radareorg/radare2

Heap-based Buffer Overflow in radareorg/radare2

Access of Memory Location Before Start of Buffer in radareorg/radare2

Access of Memory Location After End of Buffer in radareorg/radare2

Buffer Access with Incorrect Length Value in radareorg/radare2

NULL Pointer Dereference in radareorg/radare2

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2

Heap-based Buffer Overflow in radareorg/radare2

NULL Pointer Dereference in radareorg/radare2

radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

Denial of Service in radareorg/radare2

Out-of-bounds read in radareorg/radare2

NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2

Heap-based Buffer Overflow in radareorg/radare2

NULL Pointer Dereference in radareorg/radare2

The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.

In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.

In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.

In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.

In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.