CVE-2018-19842

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 3.1.0

Description The issue allows attackers to cause a denial of service via crafted x86 assembly data. This is demonstrated by the rasm2 tool. The problem is related to the getToken function in the libr/asm/p/asm x86 nz.c file.

Recommendations For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of crafted x86 assembly data to minimize the risk of exploitation.