The _inst__sts() function in radare2 2.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted binary file.
| Product | Vendor | Version |
|---|---|---|
| n/a | n/a | < 2c78fb287e1f430b929f2e49786518350d15605c |