CVE catalog

CVE-2017-7716

UBUNTU-CVE-2017-7716

Severity: Unknown
Published: Apr 12, 2017, 3:59:00 PM UTC
Updated: Apr 22, 2026, 11:33:01 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.73% · Oct 25, 2026

The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted Web Assembly file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Ubuntu	radare2	16.04	`0.9.6-3.1ubuntu1`	vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed: Oct 23, 2026, 5:30:52 PM UTC

References

[https://osv.dev/vulnerability/UBUNTU-CVE-2017-7716]

[FIRST EPSS] · [OSV Package Vulnerability Database]