RA
Product
radare2
24
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 11Medium 11Low 2
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14789 | 7.8 | Jul 6 | radareorg radare2 Memory64ListStream mdmp.c stack-based overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14788 | 7.8 | Jul 6 | radareorg radare2 cfile.c r_core_bin_load use after free Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14787 | 7.8 | Jul 6 | radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14760 | 7.8 | Jul 5 | radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14759 | 7.8 | Jul 5 | radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14757 | 7.8 | Jul 5 | radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-6941 | 7.8 | Apr 23 | radare2 < 6.1.4 Project Notes Path Traversal via Symlink Affected: before 6.1.4 |
| CVE-2026-40517 | 7.8 | Apr 22 | radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names Affected: before 6.1.4 |
| CVE-2026-40527 | 7.8 | Apr 17 | radare2 Command Injection via DWARF Parameter Names Affected: before bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683 |
| CVE-2026-40499 | 7.8 | Apr 15 | radare2 < 6.1.4 Command Injection via PDB Parser print_gvars() Affected: before 6.1.4 |
| CVE-2026-6940 | 7.1 | Apr 23 | radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion Affected: before 6.1.4 |
| CVE-2026-81882 | 6.1 | Sep 22 | radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser Affected: < 6.2.0 |
| CVE-2026-81879 | 6.1 | Sep 22 | radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling Affected: < 6.2.0 |
| CVE-2026-112077 | 5.6 | Oct 19 | radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism Affected: 6.2.0; 6.2.2 |
| CVE-2026-81885 | 5.5 | Sep 22 | radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser Affected: < 6.2.0 |
| CVE-2026-81886 | 5.5 | Sep 22 | radare2: Uncontrolled memory allocation in radare2 dmp64 parser Affected: < 6.2.0 |
| CVE-2026-81880 | 5.5 | Sep 22 | radare2: Uncontrolled resource consumption in radare2 PEF loader Affected: < 6.2.0 |
| CVE-2026-81878 | 5.5 | Sep 22 | radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser Affected: < 6.2.0 |
| CVE-2026-14786 | 5.5 | Jul 6 | radareorg radare2 str.c r_str_word_get0set integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14761 | 5.5 | Jul 5 | radareorg radare2 str.c r_str_append integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14758 | 5.5 | Jul 5 | radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-81881 | 4.4 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser Affected: < 6.2.0 |
| CVE-2026-81883 | 3.3 | Sep 22 | radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode Affected: < 6.2.0 |
| CVE-2026-81884 | 3.3 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser Affected: < 6.2.0 |
Showing 24
