Search CVE reports


Toggle filters

111 – 120 of 153 results


CVE-2018-12322

Low priority
Needs evaluation

There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-12321

Low priority
Needs evaluation

There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-12320

Medium priority
Needs evaluation

There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11384

Medium priority
Needs evaluation

The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11383

Medium priority
Needs evaluation

The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in...

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11382

Medium priority
Needs evaluation

The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11381

Medium priority
Needs evaluation

The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11380

Medium priority
Needs evaluation

The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11379

Medium priority
Needs evaluation

The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages

CVE-2018-11378

Medium priority
Needs evaluation

The wasm_dis() function in libr/asm/arch/wasm/wasm.c in or possibly have unspecified other impact via a crafted WASM file.

1 affected package

radare2

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
radare2 Needs evaluation Not in release Needs evaluation Needs evaluation
Show less packages