RA
Product
radare2
by radareorg · last CVE Oct 19, 2026
24
CVEs
0
On KEV
7.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 11Medium 11Low 2
Watch

Add radare2 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-14789
7.8
0%
Jul 6
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14788
7.8
0%
Jul 6
radareorg radare2 cfile.c r_core_bin_load use after free
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14787
7.8
0%
Jul 6
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14760
7.8
0%
Jul 5
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14759
7.8
0%
Jul 5
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14757
7.8
0%
Jul 5
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-6941
7.8
0%
Apr 23
radare2 < 6.1.4 Project Notes Path Traversal via Symlink
Affected: before 6.1.4
CVE-2026-40517
7.8
1%
Apr 22
radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names
Affected: before 6.1.4
CVE-2026-40527
7.8
1%
Apr 17
radare2 Command Injection via DWARF Parameter Names
Affected: before bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683
CVE-2026-40499
7.8
1%
Apr 15
radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()
Affected: before 6.1.4
CVE-2026-6940
7.1
0%
Apr 23
radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
Affected: before 6.1.4
CVE-2026-81882
6.1
0%
Sep 22
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
Affected: < 6.2.0
CVE-2026-81879
6.1
0%
Sep 22
radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling
Affected: < 6.2.0
CVE-2026-112077
5.6
0%
Oct 19
radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism
Affected: 6.2.0; 6.2.2
CVE-2026-81885
5.5
0%
Sep 22
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
Affected: < 6.2.0
CVE-2026-81886
5.5
0%
Sep 22
radare2: Uncontrolled memory allocation in radare2 dmp64 parser
Affected: < 6.2.0
CVE-2026-81880
5.5
0%
Sep 22
radare2: Uncontrolled resource consumption in radare2 PEF loader
Affected: < 6.2.0
CVE-2026-81878
5.5
0%
Sep 22
radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser
Affected: < 6.2.0
CVE-2026-14786
5.5
0%
Jul 6
radareorg radare2 str.c r_str_word_get0set integer overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14761
5.5
0%
Jul 5
radareorg radare2 str.c r_str_append integer overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-14758
5.5
0%
Jul 5
radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow
Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more
CVE-2026-81881
4.4
0%
Sep 22
radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
Affected: < 6.2.0
CVE-2026-81883
3.3
0%
Sep 22
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
Affected: < 6.2.0
CVE-2026-81884
3.3
0%
Sep 22
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
Affected: < 6.2.0
Showing 24