CVE-2017-9520

Name of the Vulnerable Software and Affected Versions radare2 version 1.5.0

Description The issue allows remote attackers to cause a denial of service, resulting in a use-after-free and application crash, via a crafted DEX file. This is due to a problem in the r config set function.

Recommendations For radare2 version 1.5.0, as a temporary workaround, consider disabling the use of crafted DEX files until a patch is available. Avoid using the r config set function with untrusted input to minimize the risk of exploitation.