CVE-2023-47016
radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.
PatchFirst · Свежие уязвимости
За последние 30 дней в radare2 опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 130
radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6.
radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c.
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2.
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.
Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0.
Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file.
Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted binary file.
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0.
radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.