CVE-2017-16357

In radare 2.0.1, a memory corruption vulnerability exists in store_versioninfo_gnu_verdef() and store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c, as demonstrated by an invalid free. This error is due to improper sh_size validation when allocating memory.

• CWE-119

• https://github.com/radare/radare2/commit/0b973e28166636e0ff1fad80baa0385c9c09c53aIssue Tracking, Patch, Third Party Advisory
• https://github.com/radare/radare2/issues/8742Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/radare/radare2/commit/0b973e28166636e0ff1fad80baa0385c9c09c53aIssue Tracking, Patch, Third Party Advisory
• https://github.com/radare/radare2/issues/8742Exploit, Issue Tracking, Patch, Third Party Advisory

Published

Nov 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16350Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-16351Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2017-16352GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer o…
• CVE-2017-16353GraphicsMagick 1.3.26 is vulnerable to a memory information …
• CVE-2017-16355In agent/Core/SpawningKit/Spawner.h in Phusion Passenger 5.1…4.7
• CVE-2017-16356Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery …
• CVE-2017-16358In radare 2.0.1, an out-of-bounds read vulnerability exists …
• CVE-2017-16359In radare 2.0.1, a pointer wraparound vulnerability exists i…
• CVE-2017-16360An issue was discovered in Adobe Acrobat and Reader: 2017.01…
• CVE-2017-16361An issue was discovered in Adobe Acrobat and Reader: 2017.01…
• CVE-2017-16362An issue was discovered in Adobe Acrobat and Reader: 2017.01…
• CVE-2017-16363An issue was discovered in Adobe Acrobat and Reader: 2017.01…