CVE-2019-12802: Fedoraproject Fedora

High severity, CVSS 7.8. EPSS: 1.6% chance of exploitation in the next 30 days.

In radare2 through 3.5.1, the rcc_context function of libr/egg/egg_lang.c mishandles changing context. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact (invalid memory access in r_egg_lang_parsechar; invalid free in rcc_pusharg).

Affected products

• Fedoraproject Fedora: version 29 only; version 30 only
• Radare RADARE2: up to and including 3.5.1

Published 2019-06-13. Last modified 2026-06-17.