RA
Product
radare2
26
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 11Medium 11Low 2
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-14789 | 7.8 | Jul 6 | radareorg radare2 Memory64ListStream mdmp.c stack-based overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14788 | 7.8 | Jul 6 | radareorg radare2 cfile.c r_core_bin_load use after free Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14787 | 7.8 | Jul 6 | radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14760 | 7.8 | Jul 5 | radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14759 | 7.8 | Jul 5 | radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14757 | 7.8 | Jul 5 | radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-6941 | 7.8 | Apr 23 | radare2 < 6.1.4 Project Notes Path Traversal via Symlink Affected: before 6.1.4 |
| CVE-2026-40517 | 7.8 | Apr 22 | radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names Affected: before 6.1.4 |
| CVE-2026-40527 | 7.8 | Apr 17 | radare2 Command Injection via DWARF Parameter Names Affected: before bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683 |
| CVE-2026-40499 | 7.8 | Apr 15 | radare2 < 6.1.4 Command Injection via PDB Parser print_gvars() Affected: before 6.1.4 |
| CVE-2026-6940 | 7.1 | Apr 23 | radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion Affected: before 6.1.4 |
Showing 11