CveMateVulnerability intelligence

Radare vulnerabilities, page 2

182 vulnerabilities

Known vulnerabilities in Radare products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.

CVE-2018-14015ubunturadare2+18y ago12-07-2018 20:00

The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.CVE-2018-14016ubunturadare2+18y ago12-07-2018 20:00

The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Mini Crash Dump file.CVE-2018-10187ubunturadare2+18y ago17-04-2018 20:00

In radare2 2.5.0, there is a heap-based buffer over-read in the dalvik_op function (libr/anal/p/anal_dalvik.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. Note that this issue is different from CVE-2018-8809, which was patched earlier.CVE-2018-10186ubunturadare2+18y ago17-04-2018 20:00

In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c). Remote attackers could leverage this vulnerability to cause a denial of service via a crafted DEX file. This issue is different from CVE-2017-15368.CVE-2018-15834ubunturadare2+18y ago12-09-2018 16:00

In radare2 before 2.9.0, a heap overflow vulnerability exists in the read_module_referenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.CVE-2018-12320ubunturadare2+18y ago13-06-2018 16:00

There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.CVE-2018-12322ubunturadare2+18y ago13-06-2018 16:00

There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file.CVE-2018-12321ubunturadare2+18y ago13-06-2018 16:00

There is a heap out of bounds read in radare2 2.6.0 in java_switch_op() in libr/anal/p/anal_java.c via a crafted Java binary file.CVE-2018-8809ubunturadare2+18y ago20-03-2018 05:00

In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file.CVE-2018-8808ubunturadare2+18y ago20-03-2018 05:00

In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted dex file.CVE-2018-8810ubunturadare2+18y ago20-03-2018 05:00

In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted Mach-O file.CVE-2021-4021ubunturadare2+14y ago24-02-2022 18:50

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.CVE-2021-44974ubunturadare2+14y ago25-05-2022 11:56

radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.CVE-2021-44975ubunturadare2+14y ago24-05-2022 14:40

radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser.CVE-2021-32495ubunturadare2+23y ago07-07-2023 18:27

Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.CVE-2021-32494ubunturadare2+23y ago07-07-2023 18:20

Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.CVE-2021-32613ubunturadare2+25y ago14-05-2021 12:11

In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file which can lead to DoS.CVE-2021-3673ubunturadare2+25y ago02-08-2021 18:09

A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a crafted LE binary can lead to resource exhaustion and DoS.CVE-2025-63744ubunturadare2+111mo ago14-11-2025 00:00

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.CVE-2025-63745ubunturadare2+111mo ago14-11-2025 00:00

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data.