CVE-2017-6448

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-6448
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6448.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-6448
Downstream
Published
2017-04-03T05:59:00.957Z
Modified
2025-11-28T12:00:24.947544Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The dalvikdisassemble function in libr/asm/p/asmdalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.

References

Affected packages

Git / github.com/radare/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radare/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected

Git / github.com/radareorg/radare2

Affected ranges

Type
GIT
Repo
https://github.com/radareorg/radare2
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
f41e941341e44aa86edd4483c4487ec09a074257

Affected versions

0.*

0.10.0
0.10.1
0.10.2
0.10.3
0.10.4
0.10.4-termux4
0.10.5
0.10.6
0.8.6
0.8.8
0.9
0.9.2
0.9.4
0.9.6
0.9.7
0.9.8
0.9.8-rc1
0.9.8-rc2
0.9.8-rc3
0.9.8-rc4
0.9.9

1.*

1.0
1.0.0
1.0.1
1.0.2
1.1.0
1.2.0
1.2.0-git

Other

radare2-windows-nightly
termux

Database specific

vanir_signatures

[
    {
        "deprecated": false,
        "target": {
            "file": "libr/asm/p/asm_dalvik.c"
        },
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "264286636004322897977003386083405207590",
                "155352883018774754031956197167307965500",
                "36598735564626101506314470498302282580",
                "274377913105406624824936830895131778734",
                "10036158539720085825536856590568779898",
                "268989116826495122227832399713033418519",
                "280687523033535879846689175977718002621",
                "196851746373758267238888239598219642820",
                "202141982668090466520355001903213177275",
                "306654789739708801344360546986091170510",
                "330095155242827101008671275380915667627",
                "224581935474812626805080202185646485432",
                "182755267650206853020610591143904420558",
                "155137853854033778246975791342339634475",
                "169721498755161206890067801072786792327",
                "37796711199032033937682327684348397163",
                "269354806905562123027247116158052674144",
                "53392990247914769669466179047528089555",
                "280648560906670549891819067025874814710",
                "247235980282064049264988901777401220619",
                "118184737743210968911020087921109068659",
                "37682112031177116435131640155658945453",
                "25163461049694638625038123650613784065",
                "39269528112131947934600648603213019179",
                "175113039917190686536089027969167302615",
                "142710849636226844516311307430091651363",
                "161681743334581883571481688225500819176",
                "160723783647906118276968314262529816143",
                "289652344102084914757489143677265318808",
                "42029458776503321638654760836078004319",
                "112055409890716004516385564447485974392",
                "231572374024996754017130728549160230634",
                "110888332600974437461818293493516259119",
                "83258769426983201619477054747423581715",
                "275785019356020009051357491977246982197",
                "75960269680981103546071229914561481827",
                "210791795537053592298044658811399846318",
                "118272403383487518821361231372369443323",
                "278183610915850283345349166501740512700",
                "278940537405141251054762049731282032084",
                "89133268938763075515331048069714498831",
                "282561159393588263728942061977319237819",
                "36761273259676994073185620990703488791",
                "8989042177220407835932156726012202247",
                "292347127391983696335833469532557672294",
                "130230870475929903834950281363801454438",
                "320915795655049767191814590090132605063",
                "210950102505105413232814597487450304919",
                "89828974833207873556779919265719317405",
                "133495817489303190364138522199925605617",
                "193954882782002699350155942579849132851",
                "329909809964695392124094744380688338958",
                "169935390593340082606517127904821041573",
                "199704256716387805211181556828710660138",
                "10241049265349395699568011100727900681",
                "304504358654989289867895063449871633244",
                "333830672903882967560091061781624916009",
                "228698341660176961134693998787129416862",
                "73456381163380910903636652186907261305",
                "274864401612176755137289952122957880116",
                "335610533175328737752344361452914835504",
                "1064952166319448390011660058857575292",
                "332458442162812481726778323948520540535",
                "54553475971919112169345666202919792485",
                "164247039357609334942201842204146657362",
                "164892453028451675537143666667763679959",
                "190123601014357160289509976141185764503",
                "56687651508697415819573941398673386242",
                "75403174878757039441617791309608976387",
                "5423146751539194150473090243332741535",
                "81111562375328679193552924436733969274",
                "196434370823308723836796234715446667124",
                "296798177999184853690500155491997023897",
                "61085228919508492004328888261181000084",
                "172099838842762884776703487855243637591",
                "244039829801504940998566562117649585301",
                "268607875741692186270085359539409745127",
                "322203667640029221800182260131477805883",
                "241415418302096770322140750734672808399",
                "86383647518661020567137499240156767985",
                "42944245502188719269257523945582780437",
                "174152662935013011330447515450487736251",
                "311623949053276160118103018990836798309",
                "212163031115414574054999425143451496770",
                "24178728080640390959945401437945481251",
                "259292382071984820630505725093507182888",
                "170532806067512590895641804553802211416",
                "219834477255770289617532193353227835622",
                "277967054875170325597102188823892816159",
                "145851746573521784086650957182402312677",
                "249187149788284521070423360243731615518",
                "193535486803451639028043565401553176855",
                "338921088292861745293988229907214322962",
                "285805291576971133667036308212962097446",
                "148532975497870566833962775514662852875",
                "149733230994917268814920792871991158432",
                "239430759429816659627024490807691818990",
                "67064993909313432711929721670948486719",
                "81190942170165948126111379305649663395",
                "157974017174491929252993033324392109790",
                "303284407268980220796526632196268399835",
                "122376085213878973610098740731830065617",
                "46824842749626236040208580747925673884",
                "295895957998098318142553380298072551428",
                "53704440355155324560415613473784050427",
                "240018546386907175921902441685599976177",
                "32448981523262369594327912775742670079",
                "212163031115414574054999425143451496770",
                "24178728080640390959945401437945481251",
                "259292382071984820630505725093507182888",
                "170532806067512590895641804553802211416",
                "219834477255770289617532193353227835622",
                "168468663321028468783638683956338879860",
                "143294936004276339170404174788229659852",
                "236610663566540075676214008243521632531",
                "76170578804606758490515177359099479917",
                "61120027265588574936046416875195274347",
                "338921088292861745293988229907214322962",
                "285805291576971133667036308212962097446",
                "148532975497870566833962775514662852875",
                "149733230994917268814920792871991158432",
                "29666782575328959633280618569406854248",
                "127213129836655812766139501701452245147",
                "172203399064606222085006067793989343654",
                "170544747260931526121649661379507104809",
                "157974017174491929252993033324392109790",
                "303284407268980220796526632196268399835",
                "236729277101639589120551900586094238315",
                "240255137795085373131287346929601965162",
                "41814123148359706504190013781199117282",
                "280116317890433051160155307356121261191",
                "284058001583002273335312121129915410092",
                "338634969844644464982104976902905474974",
                "301710619243389605413457502245776669276",
                "251540664989390157995767914419093817195",
                "172247516290676699269752555662842890199",
                "323118283718535056701106074031496693015",
                "49722703094111694027026917955408292465",
                "165794889215382803979172887899083827700",
                "51630121455479900860825041166739611183",
                "64750872090151788840436660058233121918",
                "179655800946752764257261605380028202164",
                "83322054464852019757596534722784253127",
                "158285254450501355856144274563414226621",
                "338013667775407132785008626769867697172",
                "118965215101828547786960116747576316835",
                "96702721701493041965775307977434261476",
                "238663272844891044612464066246396833872",
                "193897582867695264335375417440787027068",
                "93482879898170803725090489436523880270",
                "199075578434186211222329552059210740866",
                "63532789519808604022280868097945997883",
                "258865712949952067063631472065111458753",
                "209854019391382814606089690634876203770",
                "91075828767776644508980107164760610100",
                "41288322904454572606230391030439260729",
                "297211785960796265088504931966593572862",
                "151855784082069051534352026161897134552",
                "242396667673930850357599533773807950623",
                "136432106905403902649037756784145306143",
                "242613518774180823331104946718042345966",
                "93673712857853022031371464898078699748",
                "184144360529356824508396966012892986845",
                "221223126485706572279832719873719746038",
                "285527194347248436587537841835647464255",
                "274473037679911157034636651534378318155",
                "47279080659870466093991853080867109166",
                "272748807990771116598739575831233417516",
                "203581322051088349619391751537632259338",
                "23848842487910685108010755981870460546",
                "184144360529356824508396966012892986845",
                "178855821238508453684218320804518589728",
                "272091134719550613759736571194778678699",
                "34060432007015284656344758181295893040",
                "173588037011302275415359051484684458355",
                "245816619894598829290196721013889817631",
                "49164672875768176751958520919512347026",
                "216833331358842950422653604457993271840",
                "225615936196055169467765641606490368629",
                "210924328739685199219824755962859801157",
                "153133594358924610644540893040123816451",
                "136432106905403902649037756784145306143",
                "8954151768502724450605144133639136732",
                "164770870602436895565019975669958478430",
                "903997985014425575439493127719278141",
                "278421519328580151820701162948377446199",
                "280926916242335674876296932786057247206",
                "125909221220300171747541835384252440484",
                "120862926807796671996671412773943570817",
                "211163928916192291109817752252510445007",
                "24286060469079185872312182843642739016",
                "309082474927220463416800625526367607883",
                "903997985014425575439493127719278141",
                "140498313972958773211615188908344317282",
                "292357229122666510954373092630733725010",
                "162339485453605262033210339664161297788",
                "127880055976213075379673152549964548229",
                "32448981523262369594327912775742670079",
                "212163031115414574054999425143451496770",
                "24178728080640390959945401437945481251",
                "259292382071984820630505725093507182888",
                "170532806067512590895641804553802211416",
                "219834477255770289617532193353227835622",
                "168468663321028468783638683956338879860",
                "143294936004276339170404174788229659852",
                "236610663566540075676214008243521632531",
                "76170578804606758490515177359099479917",
                "61120027265588574936046416875195274347",
                "338921088292861745293988229907214322962",
                "285805291576971133667036308212962097446",
                "222091721857531494750761098746608878486",
                "97892665546481199622747395166329011337",
                "8157595283152219787759635723411875272",
                "111386783989335503851771432844445220478",
                "14572982087546356110867896286785795318",
                "184567558768155297853295324608595315318",
                "239430759429816659627024490807691818990",
                "67064993909313432711929721670948486719",
                "50897078721366192755113296007767761395",
                "121344361039611731791993428535640997290",
                "164229859208998562749957349781163563550",
                "280166438847928391330275159511136631183",
                "306465488814354122894815028438857497053",
                "250985359920535652403989232514504830766",
                "46673804965810320745075620295323175440",
                "130289549211475983203190401879667543909",
                "168672516142967490045653991360437498352",
                "211163928916192291109817752252510445007",
                "293399600842370198012317010192732973686",
                "12541945306378514996934469532437956076",
                "279795018343698922903111904579359822223",
                "142381120580837183096141046357763806838",
                "41730757431441942356723471017212838208",
                "44243983130759761648780761507719777505"
            ]
        },
        "id": "CVE-2017-6448-0846487d",
        "signature_type": "Line",
        "source": "https://github.com/radareorg/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
        "signature_version": "v1"
    },
    {
        "deprecated": false,
        "target": {
            "file": "libr/asm/p/asm_dalvik.c",
            "function": "dalvik_disassemble"
        },
        "digest": {
            "function_hash": "147487651027334808988518074609099350459",
            "length": 12293.0
        },
        "id": "CVE-2017-6448-550a21b1",
        "signature_type": "Function",
        "source": "https://github.com/radareorg/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
        "signature_version": "v1"
    }
]