In radare2 before 2.9.0, a heap overflow vulnerability exists in the readmodulereferenced_functions function in libr/anal/flirt.c via a crafted flirt signature file.
{ "urgency": "not yet assigned" }