RA
Product
radare2
26
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 11Medium 11Low 2
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-81882 | 6.1 | Sep 22 | radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser Affected: < 6.2.0 |
| CVE-2026-81879 | 6.1 | Sep 22 | radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling Affected: < 6.2.0 |
| CVE-2026-112077 | 5.6 | Oct 19 | radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism Affected: 6.2.0; 6.2.2 |
| CVE-2026-81885 | 5.5 | Sep 22 | radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser Affected: < 6.2.0 |
| CVE-2026-81886 | 5.5 | Sep 22 | radare2: Uncontrolled memory allocation in radare2 dmp64 parser Affected: < 6.2.0 |
| CVE-2026-81880 | 5.5 | Sep 22 | radare2: Uncontrolled resource consumption in radare2 PEF loader Affected: < 6.2.0 |
| CVE-2026-81878 | 5.5 | Sep 22 | radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser Affected: < 6.2.0 |
| CVE-2026-14786 | 5.5 | Jul 6 | radareorg radare2 str.c r_str_word_get0set integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14761 | 5.5 | Jul 5 | radareorg radare2 str.c r_str_append integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-14758 | 5.5 | Jul 5 | radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow Affected: 6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more |
| CVE-2026-81881 | 4.4 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser Affected: < 6.2.0 |
Showing 11