Radare2
by Radare
Source repositories
CVEs (182)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-47016 | Hig | 0.00 | 7.5 | 0.01 | Nov 22, 2023 | radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h. | ||
| CVE-2023-5686 | Hig | 0.00 | 8.8 | 0.01 | Oct 20, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | ||
| CVE-2022-28073 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. | ||
| CVE-2022-28072 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. | ||
| CVE-2022-28071 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. | ||
| CVE-2022-28070 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. | ||
| CVE-2022-28069 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. | ||
| CVE-2022-28068 | Hig | 0.00 | 7.5 | 0.01 | Aug 22, 2023 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. | ||
| CVE-2023-4322 | Cri | 0.00 | 9.8 | 0.01 | Aug 14, 2023 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | ||
| CVE-2021-32495 | Cri | 0.00 | 10.0 | 0.01 | Jul 7, 2023 | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service. | ||
| CVE-2021-32494 | Cri | 0.00 | 10.0 | 0.01 | Jul 7, 2023 | Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service. | ||
| CVE-2023-1605 | Hig | 0.00 | 7.5 | 0.01 | Mar 23, 2023 | Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6. | ||
| CVE-2023-27114 | Med | 0.00 | 5.5 | 0.00 | Mar 10, 2023 | radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. | ||
| CVE-2023-0302 | Hig | 0.00 | 7.8 | 0.00 | Jan 15, 2023 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2. | ||
| CVE-2022-4843 | Hig | 0.00 | 7.5 | 0.01 | Dec 29, 2022 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. | ||
| CVE-2022-4398 | Hig | 0.00 | 7.8 | 0.00 | Dec 10, 2022 | Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0. | ||
| CVE-2020-27795 | Hig | 0.00 | 7.5 | 0.01 | Aug 19, 2022 | A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing… | ||
| CVE-2020-27794 | Cri | 0.00 | 9.1 | 0.01 | Aug 19, 2022 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash. | ||
| CVE-2020-27793 | Hig | 0.00 | 7.5 | 0.01 | Aug 19, 2022 | An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack. | ||
| CVE-2022-1899 | Cri | 0.00 | 9.1 | 0.01 | May 26, 2022 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. |
- risk 0.00cvss 7.5epss 0.01
radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.
- risk 0.00cvss 8.8epss 0.01
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- risk 0.00cvss 7.5epss 0.01
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 7.5epss 0.01
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
- risk 0.00cvss 9.8epss 0.01
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
- risk 0.00cvss 10.0epss 0.01
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
- risk 0.00cvss 10.0epss 0.01
Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.
- risk 0.00cvss 7.5epss 0.01
Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.
- risk 0.00cvss 5.5epss 0.00
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
- risk 0.00cvss 7.8epss 0.00
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.
- risk 0.00cvss 7.5epss 0.01
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
- risk 0.00cvss 7.8epss 0.00
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.
- risk 0.00cvss 7.5epss 0.01
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing…
- risk 0.00cvss 9.1epss 0.01
A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and potentially causing a crash.
- risk 0.00cvss 7.5epss 0.01
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a denail of service attack.
- risk 0.00cvss 9.1epss 0.01
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
Page 6 of 10