Security Advisory

CVE-2018-11383

5.5
MEDIUM

Vulnerability Description

The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c.
Published Date May 22, 2018
Official Source NIST NVD Advisory