Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

radareorg/radare2 — Vulnerabilities & Security Advisories 44

All 44 CVE vulnerabilities found in radareorg/radare2, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for radare2, a reverse engineering framework developed by radareorg, categorized under general software weakness types. It compiles a comprehensive list of known security issues, ranging from buffer overflows and input validation errors to logic flaws and memory corruption vulnerabilities. The collected data spans from the initial public disclosure of defects through to recent patches and advisories, providing a longitudinal view of the product's security posture over time. By centralizing this information, the page allows researchers and developers to track advisory patterns associated with the radareorg vendor, offering insights into how frequently and where security lapses occur within the codebase. Users can utilize this resource to understand specific weakness classes that have impacted radare2, such as those related to its parsing engines or command-line interfaces. Additionally, the page serves as a historical record, enabling users to look up the vulnerability history of specific releases or components to assess risk and prioritize updates. This aggregation eliminates the need to scour multiple external repositories manually, providing a consolidated view of all reported and fixed issues. It supports security audits, compliance checks, and development hardening efforts by highlighting recurring themes in vulnerability reports. The content is strictly factual, focusing on the technical details of the weaknesses and their resolutions. It aims to improve transparency and facilitate faster mitigation strategies for users and maintainers alike by presenting all relevant data in one accessible location without redundancy or noise.

Vendor: radareorg

CVE ID Title CVSS Severity Published
CVE-2023-5686 Heap-based Buffer Overflow in radareorg/radare2 CWE-122 7.8 - 2023-10-20
CVE-2023-4322 Heap-based Buffer Overflow in radareorg/radare2 CWE-122 7.8 - 2023-08-14
CVE-2023-1605 Denial of Service in radareorg/radare2 CWE-400 6.2 - 2023-03-23
CVE-2023-0302 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2 CWE-75 7.8 - 2023-01-15
CVE-2022-4843 NULL Pointer Dereference in radareorg/radare2 CWE-476 5.5 - 2022-12-29
CVE-2022-4398 Integer Overflow or Wraparound in radareorg/radare2 CWE-190 5.5 - 2022-12-10
CVE-2022-1899 Out-of-bounds Read in radareorg/radare2 CWE-125 7.7 - 2022-05-26
CVE-2022-1809 Access of Uninitialized Pointer in radareorg/radare2 CWE-824 7.1 - 2022-05-21
CVE-2022-1714 Out-of-bounds Read in radareorg/radare2 CWE-125 7.1 - 2022-05-13
CVE-2022-1649 Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2 CWE-476 7.1 - 2022-05-10
CVE-2022-1451 Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2 CWE-788 7.1 - 2022-04-24
CVE-2022-1452 Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2 CWE-125 7.1 - 2022-04-24
CVE-2022-1444 heap-use-after-free in radareorg/radare2 CWE-416 5.5 - 2022-04-23
CVE-2022-1437 Heap-based Buffer Overflow in radareorg/radare2 CWE-122 7.1 - 2022-04-22
CVE-2022-1383 Heap-based Buffer Overflow in radareorg/radare2 CWE-122 7.1 - 2022-04-17
CVE-2022-1382 NULL Pointer Dereference in radareorg/radare2 CWE-476 5.5 - 2022-04-16
CVE-2022-1297 Out-of-bounds Read in r_bin_ne_get_entrypoints function in radareorg/radare2 CWE-125 9.1 - 2022-04-11
CVE-2022-1296 Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare2 CWE-125 8.1 - 2022-04-11
CVE-2022-1284 heap-use-after-free in radareorg/radare2 CWE-416 5.5 - 2022-04-08
CVE-2022-1283 NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2 CWE-476 5.5 - 2022-04-08
CVE-2022-1240 Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2 CWE-122 7.8 - 2022-04-06
CVE-2022-1237 Improper Validation of Array Index in radareorg/radare2 CWE-129 7.8 - 2022-04-06
CVE-2022-1238 Out-of-bounds Write in libr/bin/format/ne/ne.c in radareorg/radare2 CWE-787 7.8 - 2022-04-06
CVE-2022-1244 heap-buffer-overflow in radareorg/radare2 CWE-122 5.5 - 2022-04-05
CVE-2022-1207 Out-of-bounds read in radareorg/radare2 CWE-125 5.5 - 2022-04-01
CVE-2022-1052 Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2 CWE-122 6.2 - 2022-03-24
CVE-2022-1061 Heap Buffer Overflow in parseDragons in radareorg/radare2 CWE-122 6.5 - 2022-03-24
CVE-2022-1031 Use After Free in op_is_set_bp in radareorg/radare2 CWE-416 7.8 - 2022-03-22
CVE-2022-0849 Use After Free in r_reg_get_name_idx in radareorg/radare2 CWE-416 7.1 - 2022-03-05
CVE-2022-0695 Denial of Service in radareorg/radare2 CWE-400 6.2 - 2022-02-24

All 44 known CVE vulnerabilities affecting radareorg/radare2 with full Chinese analysis, references, and POCs where available.