RA
Product
radare2
180
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 72Medium 80Low 12
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-14017 | 5.5 | Jul 12 | The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application… Affected: 2.7.0 |
| CVE-2018-12322 | 5.5 | Jun 13 | There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file Affected: 2.6.0 |
| CVE-2018-11380 | 5.5 | May 22 | The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O… Affected: 2.5.0 |
| CVE-2018-11384 | 5.5 | May 22 | The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file Affected: 2.5.0 |
| CVE-2018-11383 | 5.5 | May 22 | The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an… Affected: 2.5.0 |
| CVE-2018-11382 | 5.5 | May 22 | The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file Affected: 2.5.0 |
| CVE-2018-11381 | 5.5 | May 22 | The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary… Affected: 2.5.0 |
| CVE-2018-11379 | 5.5 | May 22 | The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file Affected: 2.5.0 |
| CVE-2018-11377 | 5.5 | May 22 | The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file Affected: 2.5.0 |
| CVE-2018-11376 | 5.5 | May 22 | The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file Affected: 2.5.0 |
| CVE-2018-11375 | 5.5 | May 22 | The _inst__lds() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file Affected: 2.5.0 |
| CVE-2018-10186 | 5.5 | Apr 17 | In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c) Affected: 2.5.0 |
| CVE-2018-10187 | 5.5 | Apr 17 | In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c) Affected: 2.5.0 |
| CVE-2018-8809 | 5.5 | Mar 20 | In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c Affected: 2.4.0 |
| CVE-2018-8810 | 5.5 | Mar 20 | In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c Affected: 2.4.0 |
| CVE-2018-8808 | 5.5 | Mar 20 | In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c Affected: 2.4.0 |
| CVE-2017-16805 | 5.5 | Nov 13 | In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to… Affected: 2.0.1 |
| CVE-2017-16359 | 5.5 | Nov 1 | In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c Affected: 2.0.1 |
| CVE-2017-9761 | 5.5 | Jun 19 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted… Affected: 1.5.0 |
| CVE-2017-9762 | 5.5 | Jun 19 | The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary… Affected: 1.5.0 |
| CVE-2017-9520 | 5.5 | Jun 8 | The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX… Affected: 1.5.0 |
| CVE-2017-7946 | 5.5 | Apr 18 | The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a… Affected: 1.3.0 |
| CVE-2017-7854 | 5.5 | Apr 13 | The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted… Affected: 1.3.0 |
| CVE-2017-7716 | 5.5 | Apr 12 | The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a… Affected: 1.3.0 |
| CVE-2017-7274 | 5.5 | Mar 27 | The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… Affected: 1.3.0 |
| CVE-2017-6415 | 5.5 | Mar 2 | The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Affected: 1.2.1 |
| CVE-2017-6387 | 5.5 | Mar 2 | The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted… Affected: 1.2.1 |
| CVE-2017-6197 | 5.5 | Feb 24 | The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… Affected: 1.2.1 |
| CVE-2026-81881 | 4.4 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser Affected: before 6.2.0 |
| CVE-2025-63744 | 4.3 | Nov 14 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c Affected: through 6.0.5 |