Radare 2

radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data.

radare2: Uncontrolled resource consumption in radare2 PEF loader

radare2 rasm2 rasm2.c memory corruption

radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.

radare2 v5.9.8 and before contains a memory leak in the function bochs_open.

Radare2 radiff2 pal.c r_cons_pal_init memory corruption

Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption

Radare2 radiff2 pal.c r_cons_pal_init memory corruption

Radare2 radiff2 cons.c cons_stack_load memory corruption

Radare2 radiff2 cons.c r_cons_flush use after free

Radare2 radiff2 cons.c r_cons_is_breaked memory corruption

Radare2 radiff2 pal.c r_cons_pal_init memory corruption

Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption