{"id":"CVE-2017-6448","details":"The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.","modified":"2026-04-11T03:11:43.212500Z","published":"2017-04-03T05:59:00.957Z","references":[{"type":"ADVISORY","url":"http://www.securityfocus.com/bid/97313"},{"type":"FIX","url":"https://github.com/radare/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257"},{"type":"FIX","url":"https://github.com/radare/radare2/issues/6885"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/radare/radare2","events":[{"introduced":"0"},{"last_affected":"7482dee932d3e280c8adb66b1d8f08ca36148ed5"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.2.1"}]}},{"type":"GIT","repo":"https://github.com/radareorg/radare2","events":[{"introduced":"0"},{"fixed":"f41e941341e44aa86edd4483c4487ec09a074257"}]}],"versions":["0.10.0","0.10.1","0.10.2","0.10.3","0.10.4","0.10.4-termux4","0.10.5","0.10.6","0.8.6","0.8.8","0.9","0.9.2","0.9.4","0.9.6","0.9.7","0.9.8","0.9.8-rc1","0.9.8-rc2","0.9.8-rc3","0.9.8-rc4","0.9.9","1.0","1.0.0","1.0.1","1.0.2","1.1.0","1.2.0","1.2.0-git","1.2.1","radare2-windows-nightly","termux"],"database_specific":{"vanir_signatures":[{"deprecated":false,"target":{"file":"libr/asm/p/asm_dalvik.c"},"signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257","id":"CVE-2017-6448-0846487d","digest":{"line_hashes":["264286636004322897977003386083405207590","155352883018774754031956197167307965500","36598735564626101506314470498302282580","274377913105406624824936830895131778734","10036158539720085825536856590568779898","268989116826495122227832399713033418519","280687523033535879846689175977718002621","196851746373758267238888239598219642820","202141982668090466520355001903213177275","306654789739708801344360546986091170510","330095155242827101008671275380915667627","224581935474812626805080202185646485432","182755267650206853020610591143904420558","155137853854033778246975791342339634475","169721498755161206890067801072786792327","37796711199032033937682327684348397163","269354806905562123027247116158052674144","53392990247914769669466179047528089555","280648560906670549891819067025874814710","247235980282064049264988901777401220619","118184737743210968911020087921109068659","37682112031177116435131640155658945453","25163461049694638625038123650613784065","39269528112131947934600648603213019179","175113039917190686536089027969167302615","142710849636226844516311307430091651363","161681743334581883571481688225500819176","160723783647906118276968314262529816143","289652344102084914757489143677265318808","42029458776503321638654760836078004319","112055409890716004516385564447485974392","231572374024996754017130728549160230634","110888332600974437461818293493516259119","83258769426983201619477054747423581715","275785019356020009051357491977246982197","75960269680981103546071229914561481827","210791795537053592298044658811399846318","118272403383487518821361231372369443323","278183610915850283345349166501740512700","278940537405141251054762049731282032084","89133268938763075515331048069714498831","282561159393588263728942061977319237819","36761273259676994073185620990703488791","8989042177220407835932156726012202247","292347127391983696335833469532557672294","130230870475929903834950281363801454438","320915795655049767191814590090132605063","210950102505105413232814597487450304919","89828974833207873556779919265719317405","133495817489303190364138522199925605617","193954882782002699350155942579849132851","329909809964695392124094744380688338958","169935390593340082606517127904821041573","199704256716387805211181556828710660138","10241049265349395699568011100727900681","304504358654989289867895063449871633244","333830672903882967560091061781624916009","228698341660176961134693998787129416862","73456381163380910903636652186907261305","274864401612176755137289952122957880116","335610533175328737752344361452914835504","1064952166319448390011660058857575292","332458442162812481726778323948520540535","54553475971919112169345666202919792485","164247039357609334942201842204146657362","164892453028451675537143666667763679959","190123601014357160289509976141185764503","56687651508697415819573941398673386242","75403174878757039441617791309608976387","5423146751539194150473090243332741535","81111562375328679193552924436733969274","196434370823308723836796234715446667124","296798177999184853690500155491997023897","61085228919508492004328888261181000084","172099838842762884776703487855243637591","244039829801504940998566562117649585301","268607875741692186270085359539409745127","322203667640029221800182260131477805883","241415418302096770322140750734672808399","86383647518661020567137499240156767985","42944245502188719269257523945582780437","174152662935013011330447515450487736251","311623949053276160118103018990836798309","212163031115414574054999425143451496770","24178728080640390959945401437945481251","259292382071984820630505725093507182888","170532806067512590895641804553802211416","219834477255770289617532193353227835622","277967054875170325597102188823892816159","145851746573521784086650957182402312677","249187149788284521070423360243731615518","193535486803451639028043565401553176855","338921088292861745293988229907214322962","285805291576971133667036308212962097446","148532975497870566833962775514662852875","149733230994917268814920792871991158432","239430759429816659627024490807691818990","67064993909313432711929721670948486719","81190942170165948126111379305649663395","157974017174491929252993033324392109790","303284407268980220796526632196268399835","122376085213878973610098740731830065617","46824842749626236040208580747925673884","295895957998098318142553380298072551428","53704440355155324560415613473784050427","240018546386907175921902441685599976177","32448981523262369594327912775742670079","212163031115414574054999425143451496770","24178728080640390959945401437945481251","259292382071984820630505725093507182888","170532806067512590895641804553802211416","219834477255770289617532193353227835622","168468663321028468783638683956338879860","143294936004276339170404174788229659852","236610663566540075676214008243521632531","76170578804606758490515177359099479917","61120027265588574936046416875195274347","338921088292861745293988229907214322962","285805291576971133667036308212962097446","148532975497870566833962775514662852875","149733230994917268814920792871991158432","29666782575328959633280618569406854248","127213129836655812766139501701452245147","172203399064606222085006067793989343654","170544747260931526121649661379507104809","157974017174491929252993033324392109790","303284407268980220796526632196268399835","236729277101639589120551900586094238315","240255137795085373131287346929601965162","41814123148359706504190013781199117282","280116317890433051160155307356121261191","284058001583002273335312121129915410092","338634969844644464982104976902905474974","301710619243389605413457502245776669276","251540664989390157995767914419093817195","172247516290676699269752555662842890199","323118283718535056701106074031496693015","49722703094111694027026917955408292465","165794889215382803979172887899083827700","51630121455479900860825041166739611183","64750872090151788840436660058233121918","179655800946752764257261605380028202164","83322054464852019757596534722784253127","158285254450501355856144274563414226621","338013667775407132785008626769867697172","118965215101828547786960116747576316835","96702721701493041965775307977434261476","238663272844891044612464066246396833872","193897582867695264335375417440787027068","93482879898170803725090489436523880270","199075578434186211222329552059210740866","63532789519808604022280868097945997883","258865712949952067063631472065111458753","209854019391382814606089690634876203770","91075828767776644508980107164760610100","41288322904454572606230391030439260729","297211785960796265088504931966593572862","151855784082069051534352026161897134552","242396667673930850357599533773807950623","136432106905403902649037756784145306143","242613518774180823331104946718042345966","93673712857853022031371464898078699748","184144360529356824508396966012892986845","221223126485706572279832719873719746038","285527194347248436587537841835647464255","274473037679911157034636651534378318155","47279080659870466093991853080867109166","272748807990771116598739575831233417516","203581322051088349619391751537632259338","23848842487910685108010755981870460546","184144360529356824508396966012892986845","178855821238508453684218320804518589728","272091134719550613759736571194778678699","34060432007015284656344758181295893040","173588037011302275415359051484684458355","245816619894598829290196721013889817631","49164672875768176751958520919512347026","216833331358842950422653604457993271840","225615936196055169467765641606490368629","210924328739685199219824755962859801157","153133594358924610644540893040123816451","136432106905403902649037756784145306143","8954151768502724450605144133639136732","164770870602436895565019975669958478430","903997985014425575439493127719278141","278421519328580151820701162948377446199","280926916242335674876296932786057247206","125909221220300171747541835384252440484","120862926807796671996671412773943570817","211163928916192291109817752252510445007","24286060469079185872312182843642739016","309082474927220463416800625526367607883","903997985014425575439493127719278141","140498313972958773211615188908344317282","292357229122666510954373092630733725010","162339485453605262033210339664161297788","127880055976213075379673152549964548229","32448981523262369594327912775742670079","212163031115414574054999425143451496770","24178728080640390959945401437945481251","259292382071984820630505725093507182888","170532806067512590895641804553802211416","219834477255770289617532193353227835622","168468663321028468783638683956338879860","143294936004276339170404174788229659852","236610663566540075676214008243521632531","76170578804606758490515177359099479917","61120027265588574936046416875195274347","338921088292861745293988229907214322962","285805291576971133667036308212962097446","222091721857531494750761098746608878486","97892665546481199622747395166329011337","8157595283152219787759635723411875272","111386783989335503851771432844445220478","14572982087546356110867896286785795318","184567558768155297853295324608595315318","239430759429816659627024490807691818990","67064993909313432711929721670948486719","50897078721366192755113296007767761395","121344361039611731791993428535640997290","164229859208998562749957349781163563550","280166438847928391330275159511136631183","306465488814354122894815028438857497053","250985359920535652403989232514504830766","46673804965810320745075620295323175440","130289549211475983203190401879667543909","168672516142967490045653991360437498352","211163928916192291109817752252510445007","293399600842370198012317010192732973686","12541945306378514996934469532437956076","279795018343698922903111904579359822223","142381120580837183096141046357763806838","41730757431441942356723471017212838208","44243983130759761648780761507719777505"],"threshold":0.9},"signature_type":"Line"},{"deprecated":false,"target":{"function":"dalvik_disassemble","file":"libr/asm/p/asm_dalvik.c"},"signature_version":"v1","source":"https://github.com/radareorg/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257","id":"CVE-2017-6448-550a21b1","digest":{"function_hash":"147487651027334808988518074609099350459","length":12293},"signature_type":"Function"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6448.json","vanir_signatures_modified":"2026-04-11T03:11:43Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}