Debian Radare2 vulnerabilities

CVE-2018-20457 [MEDIUM] CVE-2018-20457: radare2 - In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c a... In radare2 through 3.1.3, the assemble function inside libr/asm/p/asm_arm_cs.c allows attackers to cause a denial-of-service (application crash via an r_num_calc out-of-bounds read) by crafting an arm assembly input because a loop uses an incorrect index in armass.c and certain length validation is missing in armass64.c, a related issue to CVE-2018-20459. Scope: l

CVE-2018-12322 [MEDIUM] CVE-2018-12322: radare2 - There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p... There is a heap out of bounds read in radare2 2.6.0 in _6502_op() in libr/anal/p/anal_6502.c via a crafted iNES ROM binary file. Scope: local sid: resolved (fixed in 2.7.0+dfsg-1)

CVE-2022-1382 [MEDIUM] CVE-2022-1382: radare2 - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. ... NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the availability of the system. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-0849 [MEDIUM] CVE-2022-0849: radare2 - Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prio... Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-1052 [MEDIUM] CVE-2022-1052: radare2 - Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/ra... Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2025-63745 [MEDIUM] CVE-2025-63745: radare2 - A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and ear... A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data. Scope: local sid: resolved (fixed in 6.0.7+ds-1)

CVE-2025-63744 [MEDIUM] CVE-2025-63744: radare2 - A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and ear... A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program. Scope: local sid: resolved (fixed in 6.0.7+ds-1)

CVE-2017-6415 [MEDIUM] CVE-2017-6415: radare2 - The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allow... The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted DEX file. Scope: local sid: resolved (fixed in 1.1.0+dfsg-3)

CVE-2017-6387 [MEDIUM] CVE-2017-6387: radare2 - The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote... The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted DEX file. Scope: local sid: resolved (fixed in 1.1.0+dfsg-3)

CVE-2018-20456 [MEDIUM] CVE-2018-20456: radare2 - In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_n... In radare2 prior to 3.1.1, the parseOperand function inside libr/asm/p/asm_x86_nz.c may allow attackers to cause a denial of service (application crash in libr/util/strbuf.c via a stack-based buffer over-read) by crafting an input file, a related issue to CVE-2018-20455. Scope: local sid: resolved (fixed in 3.1.2+dfsg-1)

CVE-2018-19843 [MEDIUM] CVE-2018-19843: radare2 - opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cau... opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2. Scope: local sid: resolved (fixed in 3.1.0+dfsg-1)

CVE-2022-0695 [MEDIUM] CVE-2022-0695: radare2 - Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-0712 [MEDIUM] CVE-2022-0712: radare2 - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-0419 [MEDIUM] CVE-2022-0419: radare2 - NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.0. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2023-27114 [MEDIUM] CVE-2023-27114: radare2 - radare2 v5.8.3 was discovered to contain a segmentation fault via the component ... radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2022-34520 [MEDIUM] CVE-2022-34520: radare2 - Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the func... Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attackers to cause a Denial of Service (DOS) via a crafted binary file. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2024-26475 [MEDIUM] CVE-2024-26475: radare2 - An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allow... An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function. Scope: local sid: resolved (fixed in 5.9.0+dfsg-1)

CVE-2024-48241 [MEDIUM] CVE-2024-48241: radare2 - An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a den... An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function. Scope: local sid: resolved (fixed in 5.9.8+dfsg-1)

CVE-2025-60360 [MEDIUM] CVE-2025-60360: radare2 - radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_... radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init. Scope: local sid: resolved (fixed in 6.0.4+dfsg-1)

CVE-2025-60359 [MEDIUM] CVE-2025-60359: radare2 - radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_ne... radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new. Scope: local sid: resolved (fixed in 6.0.4+dfsg-1)