Approved changes feed: RSS · Atom

cpe:2.3:a:radare:radare2:2.7.0:*:*:*:*:*:*:*

part: a version: 2.7.0 update: *

VendorRadare (176a3fb1-d88d-5339-a85a-4d42314edb64)
ProductRadare2 (e94cf00c-d302-59d8-86a0-ecc4b3e4aefe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/radareorg/radare2 purl2cpe 2026-06-01 10:18:02.958716

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-14017 vulnerable 2026-06-08 05:10:52.600411 Details available
The r_bin_java_annotation_new function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted .class file because of missing input validation in r_bin_java_line_number_table_attr_new.
Published: 2018-07-12T20:00:00.000Z
Updated: 2024-08-05T09:21:40.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14016 vulnerable 2026-06-08 05:10:52.599977 Details available
The r_bin_mdmp_init_directory_entry function in mdmp.c in radare2 2.7.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Mini Crash Dump file.
Published: 2018-07-12T20:00:00.000Z
Updated: 2024-08-05T09:21:40.843Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14015 vulnerable 2026-06-08 05:10:52.598442 Details available
The sdb_set_internal function in sdb.c in radare2 2.7.0 allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file because of missing input validation in r_bin_dwarf_parse_comp_unit in libr/bin/dwarf.c.
Published: 2018-07-12T20:00:00.000Z
Updated: 2024-08-05T09:21:40.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.