Radare2
by Radare
Source repositories
CVEs (173)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-0522 | Hig | 0.00 | 7.1 | 0.01 | Feb 8, 2022 | Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. | ||
| CVE-2022-0521 | Hig | 0.00 | 7.1 | 0.01 | Feb 8, 2022 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. | ||
| CVE-2022-0520 | Hig | 0.00 | 7.8 | 0.01 | Feb 8, 2022 | Use After Free in NPM radare2.js prior to 5.6.2. | ||
| CVE-2022-0519 | Hig | 0.00 | 7.1 | 0.01 | Feb 8, 2022 | Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. | ||
| CVE-2022-0518 | Hig | 0.00 | 7.1 | 0.01 | Feb 8, 2022 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2. | ||
| CVE-2022-0139 | Cri | 0.00 | 9.8 | 0.01 | Feb 8, 2022 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0. | ||
| CVE-2022-0419 | Med | 0.00 | 5.5 | 0.01 | Feb 1, 2022 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. | ||
| CVE-2022-0173 | Med | 0.00 | 5.5 | 0.01 | Jan 11, 2022 | radare2 is vulnerable to Out-of-bounds Read | ||
| CVE-2021-32613 | Med | 0.00 | 5.5 | 0.01 | May 14, 2021 | In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS. | ||
| CVE-2020-15121 | Hig | 0.00 | 7.4 | 0.02 | Jul 20, 2020 | In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned… | ||
| CVE-2019-14745 | Hig | 0.00 | 7.8 | 0.04 | Aug 7, 2019 | In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of… | ||
| CVE-2018-20461 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file. | ||
| CVE-2018-20460 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file. | ||
| CVE-2018-20459 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length… | ||
| CVE-2018-20458 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file. | ||
| CVE-2018-20457 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain… | ||
| CVE-2018-20456 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455. | ||
| CVE-2018-20455 | Med | 0.00 | 5.5 | 0.01 | Dec 25, 2018 | In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456. | ||
| CVE-2018-19843 | Med | 0.00 | 5.5 | 0.01 | Dec 4, 2018 | opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2. | ||
| CVE-2018-19842 | Med | 0.00 | 5.5 | 0.01 | Dec 4, 2018 | getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2. |
- risk 0.00cvss 7.1epss 0.01
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
- risk 0.00cvss 7.1epss 0.01
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
- risk 0.00cvss 7.8epss 0.01
Use After Free in NPM radare2.js prior to 5.6.2.
- risk 0.00cvss 7.1epss 0.01
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
- risk 0.00cvss 7.1epss 0.01
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
- risk 0.00cvss 9.8epss 0.01
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.
- risk 0.00cvss 5.5epss 0.01
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0.
- risk 0.00cvss 5.5epss 0.01
radare2 is vulnerable to Out-of-bounds Read
- risk 0.00cvss 5.5epss 0.01
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.
- risk 0.00cvss 7.4epss 0.02
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection. To trigger the problem it's required to open the executable in radare2 and run idpd to trigger the download. The shell code will execute, and will create a file called pwned…
- risk 0.00cvss 7.8epss 0.04
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c. By using a crafted executable file, it's possible to execute arbitrary shell commands with the permissions of the victim. This vulnerability is due to improper handling of…
- risk 0.00cvss 5.5epss 0.01
In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.
- risk 0.00cvss 5.5epss 0.01
In radare2 prior to 3.1.2, the parseOperands function in libr/asm/arch/arm/armass64.c allows attackers to cause a denial-of-service (application crash caused by stack-based buffer overflow) by crafting an input file.
- risk 0.00cvss 5.5epss 0.01
In radare2 through 3.1.3, the armass_assemble function in libr/asm/arch/arm/armass.c allows attackers to cause a denial-of-service (application crash by out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length…
- risk 0.00cvss 5.5epss 0.01
In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.
- risk 0.00cvss 5.5epss 0.01
In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain…
- risk 0.00cvss 5.5epss 0.01
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455.
- risk 0.00cvss 5.5epss 0.01
In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash via a stack-based buffer overflow) by crafting an input file, a related issue to CVE-2018-20456.
- risk 0.00cvss 5.5epss 0.01
opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
- risk 0.00cvss 5.5epss 0.01
getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.
Page 8 of 9