RA
Product
radare2
by radare · last CVE Sep 22, 2026
180
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 72Medium 80Low 12
Watch

Add radare2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-8696
9.8
1%
May 15
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
Affected: through 6.1.4
CVE-2026-8695
9.8
1%
May 15
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
Affected: through 6.1.4
CVE-2025-1864
9.8
0%
Mar 3
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9
Affected: through 5.9.8
CVE-2025-1744
9.8
1%
Feb 28
Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9
Affected: through 5.9.8
CVE-2024-29646
9.8
1%
Dec 17
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields
Affected: 5.8.8
CVE-2023-46570
9.8
1%
Oct 28
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h
Affected: before 5.9.0
CVE-2023-46569
9.8
1%
Oct 28
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h
Affected: before 5.9.0
CVE-2023-4322
9.8
1%
Aug 14
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0
Affected: through 5.8.8
CVE-2022-0559
9.8
1%
Feb 16
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2
Affected: before 5.6.2
CVE-2022-0139
9.8
1%
Feb 8
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0
Affected: before 5.6.0
CVE-2020-15121
9.6
2%
Jul 20
In radare2 before version 4.5.0, malformed PDB file names in the PDB server path cause shell injection
Affected: before 4.5.0
CVE-2021-32495
9.1
1%
Jul 7
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function
Affected: 5.3.0
CVE-2020-27794
9.1
1%
Aug 19
A double free issue was discovered in radare2 in cmd_info.c:cmd_info()
Affected: before 4.4.0
CVE-2022-1899
9.1
1%
May 26
Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0
Affected: before 5.7.0
CVE-2022-1297
9.1
1%
Apr 11
Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8
Affected: before 5.6.8
CVE-2022-1296
9.1
1%
Apr 11
Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8
Affected: before 5.6.8
Showing 16