CVE-2017-15368 — The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call

Back Back to CVE browser

HIGH

The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call

Published Oct 16, 2017

7.8

HIGH

CVSS 3.0

EPSS 1.32%

Description

The wasm_dis function in libr/asm/arch/wasm/wasm.c in radare2 2.0.0 allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) or possibly have unspecified other impact via a crafted WASM file that triggers an incorrect r_hex_bin2str call.

Affected products

Remediation

No remediation recorded yet.

Metrics

1.32% 0.01320

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.01320

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	1.32% (0.01320)	69.81th	v5 (v2026.06.15)
Sep 20, 2026	1.32% (0.01320)	69.58th	v5 (v2026.06.15)
Jul 20, 2024	0.11% (0.00107)	44.03th	v3 (v2023.03.01)
Apr 25, 2024	0.11% (0.00107)	42.84th	v3 (v2023.03.01)
Mar 15, 2024	0.09% (0.00091)	37.63th	v3 (v2023.03.01)
Feb 8, 2024	0.08% (0.00083)	33.60th	v3 (v2023.03.01)
Jan 19, 2024	0.24% (0.00242)	62.18th	v3 (v2023.03.01)
Sep 25, 2023	0.16% (0.00162)	52.38th	v3 (v2023.03.01)
Sep 3, 2023	0.14% (0.00137)	48.33th	v3 (v2023.03.01)
Mar 7, 2023	0.11% (0.00114)	43.21th	v3 (v2023.03.01)
Mar 6, 2023	1.05% (0.01055)	52.13th	v2 (v2022.01.01)
Feb 4, 2022	1.05% (0.01055)	27.52th	v2 (v2022.01.01)
Feb 3, 2022	0.98% (0.00976)	26.54th	v5 (v2026.06.15)
Apr 14, 2021	0.98% (0.00976)	0.00th	v1

Weaknesses (1)

CWE-125

Out-of-bounds Read

References (2)

https://github.com/radare/radare2/commit/52b1526443c1f433087928291d1c3d37a5600515
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/radare/radare2/issues/8673
x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Link	Providers	Tags
https://github.com/radare/radare2/commit/52b1526443c1f433087928291d1c3d37a5600515		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory
https://github.com/radare/radare2/issues/8673		x_refsource_CONFIRMIssue TrackingPatchThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 16, 2017

Updated Sep 17, 2024

Reserved Oct 15, 2017

Link CVE-2017-15368

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-15368

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-15368