Login Request a demo
High severity · published Jul 6, 2026
CVE-2026-14787
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: 2b6265476c75567006b0fcbb749f4ae7b189c5df. It is recommended to apply a patch to fix this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
radare2 · radareorg
6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more · source: vendor, NVD
Affected product
RA
radare2
radareorg
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14787
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14787
Patch
https://github.com/phix33/radare2/commit/2b6265476c75567006b0fcbb749f4ae7b189c5df
Product
https://github.com/radareorg/radare2/
Exploit
https://github.com/radareorg/radare2/issues/26048
Third Party Advisory
https://vuldb.com/cve/CVE-2026-14787
Third Party Advisory
https://vuldb.com/submit/850387
Third Party Advisory
https://vuldb.com/vuln/376376
More from radare2
7.8
CVE-2026-14789
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
7.8
CVE-2026-14788
radareorg radare2 cfile.c r_core_bin_load use after free
7.8
CVE-2026-14760
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
7.8
CVE-2026-14759
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
7.8
CVE-2026-14757
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow