Login Request a demo
High severity · published Jul 5, 2026
CVE-2026-14760
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8b25c773785d85cb0103410a0905089d286921c2. It is advisable to implement a patch to correct this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
radare2 · radareorg
6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more · source: vendor, NVD
Affected product
RA
radare2
radareorg
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14760
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14760
Product
https://github.com/radareorg/radare2/
Patch
https://github.com/radareorg/radare2/commit/8b25c773785d85cb0103410a0905089d286921c2
Exploit
https://github.com/radareorg/radare2/issues/26044
Third Party Advisory
https://vuldb.com/cve/CVE-2026-14760
Third Party Advisory
https://vuldb.com/submit/850384
Third Party Advisory
https://vuldb.com/vuln/376349
More from radare2
7.8
CVE-2026-14789
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
7.8
CVE-2026-14788
radareorg radare2 cfile.c r_core_bin_load use after free
7.8
CVE-2026-14787
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
7.8
CVE-2026-14759
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
7.8
CVE-2026-14757
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow