Approved changes feed: RSS · Atom

cpe:2.3:a:radare:radare2:2.5.0:*:*:*:*:*:*:*

part: a version: 2.5.0 update: *

VendorRadare (176a3fb1-d88d-5339-a85a-4d42314edb64)
ProductRadare2 (e94cf00c-d302-59d8-86a0-ecc4b3e4aefe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/radareorg/radare2 purl2cpe 2026-06-01 10:18:02.958712

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-11384 vulnerable 2026-06-08 05:10:38.405324 Details available
The sh_op() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted ELF file.
Published: 2018-05-22T19:00:00.000Z
Updated: 2024-08-05T08:10:13.701Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11383 vulnerable 2026-06-08 05:10:38.404935 Details available
The r_strbuf_fini() function in radare2 2.5.0 allows remote attackers to cause a denial of service (invalid free and application crash) via a crafted ELF file because of an uninitialized variable in the CPSE handler in libr/anal/p/anal_avr.c.
Published: 2018-05-22T19:00:00.000Z
Updated: 2024-08-05T08:10:13.370Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11382 vulnerable 2026-06-08 05:10:38.404649 Details available
The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Published: 2018-05-22T19:00:00.000Z
Updated: 2024-08-05T08:10:13.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11381 vulnerable 2026-06-08 05:10:38.404368 Details available
The string_scan_range() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
Published: 2018-05-22T19:00:00.000Z
Updated: 2024-08-05T08:10:13.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11380 vulnerable 2026-06-08 05:10:38.404079 Details available
The parse_import_ptr() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted Mach-O file.
Published: 2018-05-22T19:00:00.000Z
Updated: 2024-08-05T08:10:13.359Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11379 vulnerable 2026-06-08 05:10:38.403707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11378 vulnerable 2026-06-08 05:10:38.403417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11377 vulnerable 2026-06-08 05:10:38.403112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11376 vulnerable 2026-06-08 05:10:38.402756 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11375 vulnerable 2026-06-08 05:10:38.402242 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10187 vulnerable 2026-06-08 05:10:26.413221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10186 vulnerable 2026-06-08 05:10:26.412841 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.