CVE-2017-6197

CVE-2017-6197 describes a denial-of-service vulnerability in radare2 versions up to 1.2.1, specifically within the r_read_* functions in libr/include/r_endian.h. This flaw allows a remote attacker to crash the application via a crafted binary file, leading to a NULL pointer dereference. Rated Medium (CVSS 5.5), the attack requires local access and user interaction (UI:R) to trigger the vulnerability, resulting in high availability impact (A:H) but no confidentiality or integrity loss. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat landscape.