CVE-2018-10186

Name of the Vulnerable Software and Affected Versions: radare2 version 2.5.0

Description: The issue is a heap-based buffer over-read in the r hex bin2str function, located in libr/util/hex.c. This could allow remote attackers to cause a denial of service by providing a crafted DEX file.

Recommendations: For radare2 version 2.5.0, consider avoiding the use of crafted DEX files until a patch is available. As a temporary workaround, restrict the input to the r hex bin2str function to prevent potential exploitation.