In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c via crafted ELF…

In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF…

The store_versioninfo_gnu_verdef function in libr/bin/format/elf/elf.c in radare2 2.0.0 allows remote attackers to cause a denial of service (r_read_le16 invalid write and…

The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or…

The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or…

The grub_memmove function in shlr/grub/kern/misc.c in radare2 1.5.0 allows remote attackers to cause a denial of service (stack-based buffer underflow and application crash) or…

The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application…

The relocs function in libr/bin/p/bin_bflt.c in radare2 1.2.1 allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly…

The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (buffer overflow and application crash) or possibly…

radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h

A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0

A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0

A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0

A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0

A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0

A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0

Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function

Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6

NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2

A segmentation fault was discovered in radare2 with adf command

An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c

Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8

A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2

A vulnerability was found in Radare2 in version 5.3.1

radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c

radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, as…

The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service…

radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP

radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion

Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4

Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2

Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2

Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2

Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8

radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser

radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling

Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8

radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser

radare2: Uncontrolled memory allocation in radare2 dmp64 parser

radare2: Uncontrolled resource consumption in radare2 PEF loader

radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

radareorg radare2 str.c r_str_word_get0set integer overflow

radareorg radare2 str.c r_str_append integer overflow

radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow

A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c