In radare 2.0.1, an out-of-bounds read vulnerability exists in stringscanrange() in libr/bin/bin.c when doing a string search.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-16358.json"