CVE-2018-12320

There is a use after free in radare2 2.6.0 in r_anal_bb_free() in libr/anal/bb.c via a crafted Java binary file.

• CWE-416

• https://github.com/radare/radare2/commit/90b71c017a7fa9732fe45fd21b245ee051b1f548Patch, Third Party Advisory
• https://github.com/radare/radare2/issues/10293Issue Tracking, Third Party Advisory
• https://github.com/radare/radare2/commit/90b71c017a7fa9732fe45fd21b245ee051b1f548Patch, Third Party Advisory
• https://github.com/radare/radare2/issues/10293Issue Tracking, Third Party Advisory

Published

Jun 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12315Missing verification of a password in ASUSTOR ADM version 3.…
• CVE-2018-12316OS Command Injection in upload.cgi in ASUSTOR ADM version 3.…
• CVE-2018-12317OS command injection in group.cgi in ASUSTOR ADM version 3.1…
• CVE-2018-12318Information disclosure in the SNMP settings page in ASUSTOR …
• CVE-2018-12319Denial-of-service in the login page of ASUSTOR ADM 3.1.1 all…
• CVE-2018-1232RSA Authentication Agent version 8.0.1 and earlier for Web f…
• CVE-2018-12321There is a heap out of bounds read in radare2 2.6.0 in java_…
• CVE-2018-12322There is a heap out of bounds read in radare2 2.6.0 in _6502…
• CVE-2018-12323An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12326Buffer overflow in redis-cli of Redis before 4.0.10 and 5.x …
• CVE-2018-12327Stack-based buffer overflow in ntpq and ntpdc of NTP version…
• CVE-2018-12329Protection Mechanism Failure in ECOS Secure Boot Stick (aka …