CVE-2018-19842

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

getToken in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (stack-based buffer over-read) via crafted x86 assembly data, as demonstrated by rasm2.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-125

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/radare/radare2/commit/66191f780863ea8c66ace4040d0d04a8842e8432Patch, Third Party Advisory
https://github.com/radare/radare2/issues/12239Exploit, Third Party Advisory
https://github.com/radare/radare2/commit/66191f780863ea8c66ace4040d0d04a8842e8432Patch, Third Party Advisory
https://github.com/radare/radare2/issues/12239Exploit, Third Party Advisory

Timeline

Published: Dec 4, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-198435.5opmov in libr/asm/p/asm_x86_nz.c in radare2 before 3.1.0 allows attackers to cause a denial of service (buffer over-read) via crafted x86 as CVE-2018-198444.8FROG CMS 0.9.5 has XSS via the admin/?/snippet/add name parameter, which is mishandled during an edit action, a related issue to CVE-2018-10 CVE-2018-198455.4There is Stored XSS in GetSimple CMS 3.3.12 via the admin/edit.php "post-menu" parameter, a related issue to CVE-2018-16325.CVE-2018-198494.8An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter.CVE-2018-19854.4IBM Trusteer Rapport/Apex 3.6.1908.22 contains an unused legacy driver which could allow a user with administrator privileges to cause a buf CVE-2018-198538.8An issue was discovered in hitshop through 2014-07-15. There is an elevation-of-privilege vulnerability (that allows control over the whole CVE-2018-198544.7An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_user.c (the crypto use CVE-2018-198555.5UiPath Orchestrator before 2018.3.4 allows CSV Injection, related to the Audit export, Robot log export, and Transaction log export features CVE-2018-198567.5GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API.CVE-2018-198579.1The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing magi CVE-2018-198588.6PrinceXML, versions 10 and below, is vulnerable to XXE due to the lack of protection against external entities. If an attacker passes HTML r CVE-2018-198596.5OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.