In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in storeversioninfognuverdef() in libr/bin/format/elf/elf.c via crafted ELF files when parsing the ELF version on 32bit systems.

In radare2 2.0.1, an integer exception (negative number leading to an invalid memory access) exists in storeversioninfognuverneed() in libr/bin/format/elf/elf.c via crafted ELF files on 32bit systems.

In radare 2.0.1, an out-of-bounds read vulnerability exists in stringscanrange() in libr/bin/bin.c when doing a string search.

In radare 2.0.1, a pointer wraparound vulnerability exists in storeversioninfognuverdef() in libr/bin/format/elf/elf.c.

In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to rbindwarfparsecompunit in dwarf.c and sdbsetinternal in shlr/sdb/src/sdb.c.