radare2 vulnerabilities
14 known vulnerabilities in radare2 from Radareorg. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.5 High severity
radare2: Improper Neutralization of Special Elements used in an OS Command
radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.2, attacker-controlled data from several binary format plugins could reach RBinInfo->bclass. Opening or analyzing a crafted Pebble or Sega Mega Drive binary could place
- 7.8 High severity
radare2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of the file libr/bin/format/mdmp/mdmp.c of the component Memory64ListStream Parser. Performing a manipulation results in stack-based buffer over
- 7.8 High severity
radare2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/core/cfile.c. Such manipulation leads to use after free. The attack needs to be performed locally. The
- 7.8 High severity
A weakness has been identified in radareorg radare2 up to 6.1.6.
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched loc
- 7.8 High severity
radare2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local a
- 7.8 High severity
radare2: Improper Restriction of Operations within the Bounds of a Memory Buffer
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in
- 7.8 High severity
A vulnerability was determined in radareorg radare2 up to 6.1.6.
A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been publicly dis
- 7.8 High severity
radare2: Improper Limitation of a Pathname to a Restricted Directory
radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Atta
- 7.1 High severity
radare2: Improper Limitation of a Pathname to a Restricted Directory
radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft a
- 7.8 High severity
radare2: Improper Neutralization of Special Elements used in an OS Command
radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbi
- 7.8 High severity
radare2: Improper Neutralization of Special Elements used in an OS Command
radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names. Attackers can craft a binary with shell comman
- 7.8 High severity
radare2: Improper Neutralization of Special Elements used in an OS Command
radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a mali
- 9.8 Critical severity
radare2: Buffer Copy without Checking Size of Input
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9.
- 9.8 Critical severity
radare2: Out-of-bounds Write
Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.