radare Vulnerability Advisory Catalog

Total 172 security vulnerabilities recorded for radare software and firmware.

← Back to All Vendors
Component: radare2

A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0....

📅 2023-08-22
CVSS 7.5 Dossier →
CVE-2023-4322 CRITICAL
Component: radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0....

📅 2023-08-14
CVSS 9.8 Dossier →
CVE-2021-32495 CRITICAL
Component: radare2

Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attack...

📅 2023-07-07
CVSS 10.0 Dossier →
CVE-2021-32494 CRITICAL
Component: radare2

Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause...

📅 2023-07-07
CVSS 10.0 Dossier →
Component: radare2

Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6....

📅 2023-03-23
CVSS 7.5 Dossier →
Component: radare2

radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c....

📅 2023-03-10
CVSS 5.5 Dossier →
Component: radare2

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2....

📅 2023-01-15
CVSS 7.8 Dossier →
Component: radare2

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2....

📅 2022-12-29
CVSS 7.5 Dossier →
Component: radare2

Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0....

📅 2022-12-10
CVSS 7.8 Dossier →
Component: radare2

A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (...

📅 2022-08-19
CVSS 7.5 Dossier →
CVE-2020-27794 CRITICAL
Component: radare2

A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locati...

📅 2022-08-19
CVSS 9.1 Dossier →
Component: radare2

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and per...

📅 2022-08-19
CVSS 7.5 Dossier →
Component: radare2

Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability all...

📅 2022-07-22
CVSS 5.5 Dossier →
Component: radare2

Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability al...

📅 2022-07-22
CVSS 5.5 Dossier →
CVE-2022-1899 CRITICAL
Component: radare2

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0....

📅 2022-05-26
CVSS 9.1 Dossier →
Component: radare2

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser....

📅 2022-05-25
CVSS 5.5 Dossier →
Component: radare2

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser....

📅 2022-05-24
CVSS 5.5 Dossier →
Component: radare2

Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0....

📅 2022-05-21
CVSS 7.8 Dossier →
Component: radare2

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. T...

📅 2022-05-13
CVSS 7.1 Dossier →
CVE-2022-1649 MEDIUM
Component: radare2

Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to ...

📅 2022-05-10
CVSS 5.5 Dossier →
Component: radare2

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program...

📅 2022-04-24
CVSS 7.1 Dossier →
Component: radare2

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program re...

📅 2022-04-24
CVSS 7.1 Dossier →
CVE-2022-1444 MEDIUM
Component: radare2

heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service....

📅 2022-04-23
CVSS 5.5 Dossier →
Component: radare2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented b...

📅 2022-04-22
CVSS 7.1 Dossier →
Page 3 of 8 (172 Total Records)