In radare2 before 2.9.0, a heap overflow vulnerability exists in the readmodulereferenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-15834.json"