High
Security advisory
The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-6448
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:16 UTC · Revision 1
Source evidence
The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.
osv:CVE-2017-6448
Complete source record
{
"id": "2a927afcfbf8aab766a2d6bb75a6c44ab346d8d6670f78c6db7eed0eabac66bc",
"url": "https://osv.dev/vulnerability/CVE-2017-6448",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-6448",
"summary": "The dalvik_disassemble function in libr/asm/p/asm_dalvik.c in radare2 1.2.1 allows remote attackers to cause a denial of service (stack-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted DEX file.",
"evidence": "osv:CVE-2017-6448",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-6448",
"aliases": [
"CVE-2017-6448"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/radareorg/radare2",
"type": "GIT",
"events": [
{
"introduced": "7482dee932d3e280c8adb66b1d8f08ca36148ed5"
},
{
"last_affected": "7482dee932d3e280c8adb66b1d8f08ca36148ed5"
},
{
"fixed": "f41e941341e44aa86edd4483c4487ec09a074257"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:radare:radare2:1.2.1:*:*:*:*:*:*:*",
"range": [
{
"introduced": "1.2.1"
},
{
"last_affected": "1.2.1"
}
],
"source": "CPE_STRING"
},
{
"range": [
{
"fixed": "f41e941341e44aa86edd4483c4487ec09a074257"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"1.2.1"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6448.json",
"vanir_signatures": [
{
"id": "CVE-2017-6448-0846487d",
"digest": {
"threshold": 0.9,
"line_hashes": [
"264286636004322897977003386083405207590",
"155352883018774754031956197167307965500",
"36598735564626101506314470498302282580",
"274377913105406624824936830895131778734",
"10036158539720085825536856590568779898",
"268989116826495122227832399713033418519",
"280687523033535879846689175977718002621",
"196851746373758267238888239598219642820",
"202141982668090466520355001903213177275",
"306654789739708801344360546986091170510",
"330095155242827101008671275380915667627",
"224581935474812626805080202185646485432",
"182755267650206853020610591143904420558",
"155137853854033778246975791342339634475",
"169721498755161206890067801072786792327",
"37796711199032033937682327684348397163",
"269354806905562123027247116158052674144",
"53392990247914769669466179047528089555",
"280648560906670549891819067025874814710",
"247235980282064049264988901777401220619",
"118184737743210968911020087921109068659",
"37682112031177116435131640155658945453",
"25163461049694638625038123650613784065",
"39269528112131947934600648603213019179",
"175113039917190686536089027969167302615",
"142710849636226844516311307430091651363",
"161681743334581883571481688225500819176",
"160723783647906118276968314262529816143",
"289652344102084914757489143677265318808",
"42029458776503321638654760836078004319",
"112055409890716004516385564447485974392",
"231572374024996754017130728549160230634",
"110888332600974437461818293493516259119",
"83258769426983201619477054747423581715",
"275785019356020009051357491977246982197",
"75960269680981103546071229914561481827",
"210791795537053592298044658811399846318",
"118272403383487518821361231372369443323",
"278183610915850283345349166501740512700",
"278940537405141251054762049731282032084",
"89133268938763075515331048069714498831",
"282561159393588263728942061977319237819",
"36761273259676994073185620990703488791",
"8989042177220407835932156726012202247",
"292347127391983696335833469532557672294",
"130230870475929903834950281363801454438",
"320915795655049767191814590090132605063",
"210950102505105413232814597487450304919",
"89828974833207873556779919265719317405",
"133495817489303190364138522199925605617",
"193954882782002699350155942579849132851",
"329909809964695392124094744380688338958",
"169935390593340082606517127904821041573",
"199704256716387805211181556828710660138",
"10241049265349395699568011100727900681",
"304504358654989289867895063449871633244",
"333830672903882967560091061781624916009",
"228698341660176961134693998787129416862",
"73456381163380910903636652186907261305",
"274864401612176755137289952122957880116",
"335610533175328737752344361452914835504",
"1064952166319448390011660058857575292",
"332458442162812481726778323948520540535",
"54553475971919112169345666202919792485",
"164247039357609334942201842204146657362",
"164892453028451675537143666667763679959",
"190123601014357160289509976141185764503",
"56687651508697415819573941398673386242",
"75403174878757039441617791309608976387",
"5423146751539194150473090243332741535",
"81111562375328679193552924436733969274",
"196434370823308723836796234715446667124",
"296798177999184853690500155491997023897",
"61085228919508492004328888261181000084",
"172099838842762884776703487855243637591",
"244039829801504940998566562117649585301",
"268607875741692186270085359539409745127",
"322203667640029221800182260131477805883",
"241415418302096770322140750734672808399",
"86383647518661020567137499240156767985",
"42944245502188719269257523945582780437",
"174152662935013011330447515450487736251",
"311623949053276160118103018990836798309",
"212163031115414574054999425143451496770",
"24178728080640390959945401437945481251",
"259292382071984820630505725093507182888",
"170532806067512590895641804553802211416",
"219834477255770289617532193353227835622",
"277967054875170325597102188823892816159",
"145851746573521784086650957182402312677",
"249187149788284521070423360243731615518",
"193535486803451639028043565401553176855",
"338921088292861745293988229907214322962",
"285805291576971133667036308212962097446",
"148532975497870566833962775514662852875",
"149733230994917268814920792871991158432",
"239430759429816659627024490807691818990",
"67064993909313432711929721670948486719",
"81190942170165948126111379305649663395",
"157974017174491929252993033324392109790",
"303284407268980220796526632196268399835",
"122376085213878973610098740731830065617",
"46824842749626236040208580747925673884",
"295895957998098318142553380298072551428",
"53704440355155324560415613473784050427",
"240018546386907175921902441685599976177",
"32448981523262369594327912775742670079",
"212163031115414574054999425143451496770",
"24178728080640390959945401437945481251",
"259292382071984820630505725093507182888",
"170532806067512590895641804553802211416",
"219834477255770289617532193353227835622",
"168468663321028468783638683956338879860",
"143294936004276339170404174788229659852",
"236610663566540075676214008243521632531",
"76170578804606758490515177359099479917",
"61120027265588574936046416875195274347",
"338921088292861745293988229907214322962",
"285805291576971133667036308212962097446",
"148532975497870566833962775514662852875",
"149733230994917268814920792871991158432",
"29666782575328959633280618569406854248",
"127213129836655812766139501701452245147",
"172203399064606222085006067793989343654",
"170544747260931526121649661379507104809",
"157974017174491929252993033324392109790",
"303284407268980220796526632196268399835",
"236729277101639589120551900586094238315",
"240255137795085373131287346929601965162",
"41814123148359706504190013781199117282",
"280116317890433051160155307356121261191",
"284058001583002273335312121129915410092",
"338634969844644464982104976902905474974",
"301710619243389605413457502245776669276",
"251540664989390157995767914419093817195",
"172247516290676699269752555662842890199",
"323118283718535056701106074031496693015",
"49722703094111694027026917955408292465",
"165794889215382803979172887899083827700",
"51630121455479900860825041166739611183",
"64750872090151788840436660058233121918",
"179655800946752764257261605380028202164",
"83322054464852019757596534722784253127",
"158285254450501355856144274563414226621",
"338013667775407132785008626769867697172",
"118965215101828547786960116747576316835",
"96702721701493041965775307977434261476",
"238663272844891044612464066246396833872",
"193897582867695264335375417440787027068",
"93482879898170803725090489436523880270",
"199075578434186211222329552059210740866",
"63532789519808604022280868097945997883",
"258865712949952067063631472065111458753",
"209854019391382814606089690634876203770",
"91075828767776644508980107164760610100",
"41288322904454572606230391030439260729",
"297211785960796265088504931966593572862",
"151855784082069051534352026161897134552",
"242396667673930850357599533773807950623",
"136432106905403902649037756784145306143",
"242613518774180823331104946718042345966",
"93673712857853022031371464898078699748",
"184144360529356824508396966012892986845",
"221223126485706572279832719873719746038",
"285527194347248436587537841835647464255",
"274473037679911157034636651534378318155",
"47279080659870466093991853080867109166",
"272748807990771116598739575831233417516",
"203581322051088349619391751537632259338",
"23848842487910685108010755981870460546",
"184144360529356824508396966012892986845",
"178855821238508453684218320804518589728",
"272091134719550613759736571194778678699",
"34060432007015284656344758181295893040",
"173588037011302275415359051484684458355",
"245816619894598829290196721013889817631",
"49164672875768176751958520919512347026",
"216833331358842950422653604457993271840",
"225615936196055169467765641606490368629",
"210924328739685199219824755962859801157",
"153133594358924610644540893040123816451",
"136432106905403902649037756784145306143",
"8954151768502724450605144133639136732",
"164770870602436895565019975669958478430",
"903997985014425575439493127719278141",
"278421519328580151820701162948377446199",
"280926916242335674876296932786057247206",
"125909221220300171747541835384252440484",
"120862926807796671996671412773943570817",
"211163928916192291109817752252510445007",
"24286060469079185872312182843642739016",
"309082474927220463416800625526367607883",
"903997985014425575439493127719278141",
"140498313972958773211615188908344317282",
"292357229122666510954373092630733725010",
"162339485453605262033210339664161297788",
"127880055976213075379673152549964548229",
"32448981523262369594327912775742670079",
"212163031115414574054999425143451496770",
"24178728080640390959945401437945481251",
"259292382071984820630505725093507182888",
"170532806067512590895641804553802211416",
"219834477255770289617532193353227835622",
"168468663321028468783638683956338879860",
"143294936004276339170404174788229659852",
"236610663566540075676214008243521632531",
"76170578804606758490515177359099479917",
"61120027265588574936046416875195274347",
"338921088292861745293988229907214322962",
"285805291576971133667036308212962097446",
"222091721857531494750761098746608878486",
"97892665546481199622747395166329011337",
"8157595283152219787759635723411875272",
"111386783989335503851771432844445220478",
"14572982087546356110867896286785795318",
"184567558768155297853295324608595315318",
"239430759429816659627024490807691818990",
"67064993909313432711929721670948486719",
"50897078721366192755113296007767761395",
"121344361039611731791993428535640997290",
"164229859208998562749957349781163563550",
"280166438847928391330275159511136631183",
"306465488814354122894815028438857497053",
"250985359920535652403989232514504830766",
"46673804965810320745075620295323175440",
"130289549211475983203190401879667543909",
"168672516142967490045653991360437498352",
"211163928916192291109817752252510445007",
"293399600842370198012317010192732973686",
"12541945306378514996934469532437956076",
"279795018343698922903111904579359822223",
"142381120580837183096141046357763806838",
"41730757431441942356723471017212838208",
"44243983130759761648780761507719777505"
]
},
"source": "https://github.com/radareorg/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
"target": {
"file": "libr/asm/p/asm_dalvik.c"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2017-6448-550a21b1",
"digest": {
"length": 12293,
"function_hash": "147487651027334808988518074609099350459"
},
"source": "https://github.com/radareorg/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
"target": {
"file": "libr/asm/p/asm_dalvik.c",
"function": "dalvik_disassemble"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:25:08Z"
}
}
],
"modified": "2026-10-20T13:25:08.500027031Z",
"provider": "osv",
"references": [
"https://github.com/radare/radare2/commit/f41e941341e44aa86edd4483c4487ec09a074257",
"https://github.com/radare/radare2/issues/6885"
],
"provider_metadata": {}
},
"related_cves": [
{
"value": "CVE-2017-6448",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387655,
"published_at": "2017-04-03T05:59:00.957+00:00"
}