Radare2 · Radare2 · CVE-2019-19590
**Name of the Vulnerable Software and Affected Versions**
radare2 versions prior to 4.0
**Description**
The issue is related to an integer overflow for the `new token size` variable in the `r asm massemble` function, located in `libr/asm/asm.c`. This overflow results in a Use-After-Free condition for the `tokens` buffer, which can be filled with arbitrary malicious data after it is freed. This allows remote attackers to cause a denial of service, potentially leading to an application crash, or possibly execute arbitrary code via crafted input.
**Recommendations**
For versions prior to 4.0, update to version 4.0 or later to resolve the issue. As a temporary workaround, consider restricting the input to the `r asm massemble` function to minimize the risk of exploitation.