Debian Radare2 vulnerabilities

CVE-2019-12865 [MEDIUM] CVE-2019-12865: radare2 - In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free f... In radare2 through 3.5.1, cmd_mount in libr/core/cmd_mount.c has a double free for the ms command. Scope: local sid: resolved (fixed in 3.8.0+dfsg-1)

CVE-2018-20457 [MEDIUM] CVE-2018-20457: radare2 - In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c a... In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459. Scope: l

CVE-2018-12322 [MEDIUM] CVE-2018-12322: radare2 - There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p... There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. Scope: local sid: resolved (fixed in 2.7.0+dfsg-1)

CVE-2021-44974 [MEDIUM] CVE-2021-44974: radare2 - radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via li... radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-1382 [MEDIUM] CVE-2022-1382: radare2 - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. ... NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-0849 [MEDIUM] CVE-2022-0849: radare2 - Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prio... Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2025-60360 [MEDIUM] CVE-2025-60360: radare2 - radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_... radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init. Scope: local sid: resolved (fixed in 6.0.4+dfsg-1)

CVE-2025-60359 [MEDIUM] CVE-2025-60359: radare2 - radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_ne... radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new. Scope: local sid: resolved (fixed in 6.0.4+dfsg-1)

CVE-2018-11377 [MEDIUM] CVE-2018-11377: radare2 - The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause ... The avr_op_analyze() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file. Scope: local sid: resolved (fixed in 2.6.0+dfsg-1)

CVE-2017-6415 [MEDIUM] CVE-2017-6415: radare2 - The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allow... The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DEX file. Scope: local sid: resolved (fixed in 1.1.0+dfsg-3)

CVE-2018-11383 [MEDIUM] CVE-2018-11383: radare2 - The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a... The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c. Scope: local sid: resolved (fixed in 2.6.0+dfsg-1)

CVE-2018-11379 [MEDIUM] CVE-2018-11379: radare2 - The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause ... The get_debug_info() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted PE file. Scope: local sid: resolved (fixed in 2.6.0+dfsg-1)

CVE-2018-11384 [MEDIUM] CVE-2018-11384: radare2 - The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial ... The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file. Scope: local sid: resolved (fixed in 2.6.0+dfsg-1)

CVE-2018-11376 [MEDIUM] CVE-2018-11376: radare2 - The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a d... The r_read_le32() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file. Scope: local sid: resolved (fixed in 2.6.0+dfsg-1)

CVE-2017-6387 [MEDIUM] CVE-2017-6387: radare2 - The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote... The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file. Scope: local sid: resolved (fixed in 1.1.0+dfsg-3)

CVE-2018-20456 [MEDIUM] CVE-2018-20456: radare2 - In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_n... In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455. Scope: local sid: resolved (fixed in 3.1.2+dfsg-1)

CVE-2018-19843 [MEDIUM] CVE-2018-19843: radare2 - opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cau... opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2. Scope: local sid: resolved (fixed in 3.1.0+dfsg-1)

CVE-2022-0712 [MEDIUM] CVE-2022-0712: radare2 - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-0419 [MEDIUM] CVE-2022-0419: radare2 - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2023-27114 [MEDIUM] CVE-2023-27114: radare2 - radare2 v5.8.3 was discovered to contain a segmentation fault via the component ... radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)