Radare: >> Radare2 >> 1.3.0 Security Vulnerabilities
In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
CVSS Score
5.5
EPSS Score
0.01
Published
2018-09-12
The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.
CVSS Score
5.5
EPSS Score
0.009
Published
2017-04-18
The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
CVSS Score
5.5
EPSS Score
0.011
Published
2017-04-13
The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.
CVSS Score
5.5
EPSS Score
0.007
Published
2017-04-12
The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted PE file.
CVSS Score
5.5
EPSS Score
0.016
Published
2017-03-27
Page 10