RA
Product
radare2
180
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 72Medium 80Low 12
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-8696 | 9.8 | May 15 | radare2 6.1.5 Use-After-Free via gdbr_pids_list() Affected: through 6.1.4 |
| CVE-2026-8695 | 9.8 | May 15 | radare2 6.1.5 Use-After-Free via gdbr_threads_list() Affected: through 6.1.4 |
| CVE-2025-1864 | 9.8 | Mar 3 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9 Affected: through 5.9.8 |
| CVE-2025-1744 | 9.8 | Feb 28 | Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9 Affected: through 5.9.8 |
| CVE-2024-29646 | 9.8 | Dec 17 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields Affected: 5.8.8 |
| CVE-2023-46570 | 9.8 | Oct 28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h Affected: before 5.9.0 |
| CVE-2023-46569 | 9.8 | Oct 28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h Affected: before 5.9.0 |
| CVE-2023-4322 | 9.8 | Aug 14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0 Affected: through 5.8.8 |
| CVE-2022-0559 | 9.8 | Feb 16 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2 Affected: before 5.6.2 |
| CVE-2022-0139 | 9.8 | Feb 8 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0 Affected: before 5.6.0 |
| CVE-2020-15121 | 9.6 | Jul 20 | In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection Affected: before 4.5.0 |
| CVE-2021-32495 | 9.1 | Jul 7 | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function Affected: 5.3.0 |
| CVE-2020-27794 | 9.1 | Aug 19 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info() Affected: before 4.4.0 |
| CVE-2022-1899 | 9.1 | May 26 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0 Affected: before 5.7.0 |
| CVE-2022-1297 | 9.1 | Apr 11 | Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8 Affected: before 5.6.8 |
| CVE-2022-1296 | 9.1 | Apr 11 | Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8 Affected: before 5.6.8 |
Showing 16
