CVE-2020-27795

A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, input + 1) --> RAnalFunction *fcn = r_anal_get_fcn_in (core->anal, core->offset, -1); returns null pointer for fcn causing segmentation fault later in ensure_fcn_range (fcn).

• CWE-908
• CWE-908

• https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22Patch, Third Party Advisory
• https://github.com/radareorg/radare2/issues/16215Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/radareorg/radare2/pull/16230Issue Tracking, Patch, Third Party Advisory
• https://github.com/radareorg/radare2/commit/4d3811681a80f92a53e795f6a64c4b0fc2c8dd22Patch, Third Party Advisory
• https://github.com/radareorg/radare2/issues/16215Exploit, Issue Tracking, Patch, Third Party Advisory
• https://github.com/radareorg/radare2/pull/16230Issue Tracking, Patch, Third Party Advisory

Published

Aug 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-2779Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2020-27790A floating point exception issue was discovered in UPX in Pa…5.5
• CVE-2020-27791Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-27792A heap-based buffer overwrite vulnerability was found in Gho…7.1
• CVE-2020-27793An off-by-one overflow flaw was found in radare2 due to mism…7.5
• CVE-2020-27794A double free issue was discovered in radare2 in cmd_info.c:…9.1
• CVE-2020-27796A heap-based buffer over-read was discovered in the invert_p…7.8
• CVE-2020-27797An invalid memory address reference was discovered in the el…5.5
• CVE-2020-27798An invalid memory address reference was discovered in the ad…5.5
• CVE-2020-27799A heap-based buffer over-read was discovered in the acc_ua_g…7.8
• CVE-2020-2780Vulnerability in the MySQL Server product of Oracle MySQL (c…6.5
• CVE-2020-27800A heap-based buffer over-read was discovered in the get_le32…7.8