In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in store_versioninfo_gnu_verneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems.
{
"cpe": "cpe:2.3:a:radare:radare2:2.0.1:*:*:*:*:*:*:*",
"extracted_events": [
{
"introduced": "2.0.1"
},
{
"last_affected": "2.0.1"
}
],
"source": [
"CPE_STRING",
"REFERENCES"
]
}
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-15931.json"
[
{
"deprecated": false,
"digest": {
"line_hashes": [
"176150572778416418523337908670527429070",
"28309127258288339462092334128832735568",
"111353316851435389279759708932682412784",
"248870570621381194332694366343375365658"
],
"threshold": 0.9
},
"id": "CVE-2017-15931-9b215e0b",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://github.com/radareorg/radare2/commit/c6d0076c924891ad9948a62d89d0bcdaf965f0cd",
"target": {
"file": "libr/bin/format/elf/elf.c"
}
}
]
"2026-08-07T14:59:22Z"