Vulnerabilities

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

radare2 is a UNIX-like reverse engineering framework and command-line toolset.

A vulnerability was detected in radareorg radare2 up to 6.1.6.

A security vulnerability has been detected in radareorg radare2 up to 6.1.6.

A weakness has been identified in radareorg radare2 up to 6.1.6.

A security flaw has been discovered in radareorg radare2 up to 6.1.6.

A security vulnerability has been detected in radareorg radare2 up to 6.1.6.

A weakness has been identified in radareorg radare2 up to 6.1.6.

A security flaw has been discovered in radareorg radare2 up to 6.1.6.

A vulnerability was identified in radareorg radare2 up to 6.1.6.

A vulnerability was determined in radareorg radare2 up to 6.1.6.

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending…

radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThrea…

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive con…

radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projec…

radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in…

radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names.

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section heade…