RA
Vendor
radare
182
CVEs
0
On KEV
0
New 30D
Products
RA9.8
radare2
radare
180 CVEs0 on KEV0 new
RA9.8
Radare2-extras
Radare
1 CVEs0 on KEV0 new
RM8.8
Radare2 Mcp Server
Radare
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-81883 | RA Radare2 Radare | 3.3 | Sep 22 | radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode |
| CVE-2026-81885 | RA Radare2 Radare | 5.5 | Sep 22 | radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser |
| CVE-2026-81882 | RA Radare2 Radare | 6.1 | Sep 22 | radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser |
| CVE-2026-81886 | RA Radare2 Radare | 5.5 | Sep 22 | radare2: Uncontrolled memory allocation in radare2 dmp64 parser |
| CVE-2026-81884 | RA Radare2 Radare | 3.3 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser |
| CVE-2026-81880 | RA Radare2 Radare | 5.5 | Sep 22 | radare2: Uncontrolled resource consumption in radare2 PEF loader |
| CVE-2026-81879 | RA Radare2 Radare | 6.1 | Sep 22 | radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling |
| CVE-2026-81878 | RA Radare2 Radare | 5.5 | Sep 22 | radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser |
| CVE-2026-81881 | RA Radare2 Radare | 4.4 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser |
| CVE-2026-14789 | RA Radare2 Radare | 7.8 | Jul 6 | radareorg radare2 Memory64ListStream mdmp.c stack-based overflow |
| CVE-2026-14788 | RA Radare2 Radare | 7.8 | Jul 6 | radareorg radare2 cfile.c r_core_bin_load use after free |
| CVE-2026-14787 | RA Radare2 Radare | 7.8 | Jul 6 | radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow |
| CVE-2026-14786 | RA Radare2 Radare | 5.5 | Jul 6 | radareorg radare2 str.c r_str_word_get0set integer overflow |
| CVE-2026-14761 | RA Radare2 Radare | 5.5 | Jul 5 | radareorg radare2 str.c r_str_append integer overflow |
| CVE-2026-14760 | RA Radare2 Radare | 7.8 | Jul 5 | radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free |
| CVE-2026-14759 | RA Radare2 Radare | 7.8 | Jul 5 | radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow |
| CVE-2026-14758 | RA Radare2 Radare | 5.5 | Jul 5 | radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow |
| CVE-2026-14757 | RA Radare2 Radare | 7.8 | Jul 5 | radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow |
| CVE-2026-8696 | RA Radare2 Radare | 9.8 | May 15 | radare2 6.1.5 Use-After-Free via gdbr_pids_list() |
| CVE-2026-8695 | RA Radare2 Radare | 9.8 | May 15 | radare2 6.1.5 Use-After-Free via gdbr_threads_list() |
| CVE-2026-6942 | RM Radare2 Mcp Server Radare | 8.8 | Apr 23 | radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass |
| CVE-2026-6941 | RA Radare2 Radare | 7.8 | Apr 23 | radare2 < 6.1.4 Project Notes Path Traversal via Symlink |
| CVE-2026-6940 | RA Radare2 Radare | 7.1 | Apr 23 | radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion |
| CVE-2026-40517 | RA Radare2 Radare | 7.8 | Apr 22 | radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names |
| CVE-2026-40527 | RA Radare2 Radare | 7.8 | Apr 17 | radare2 Command Injection via DWARF Parameter Names |
| CVE-2026-41015 | RA radare2 radare | 7.4 | Apr 16 | radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP |
| CVE-2026-40499 | RA Radare2 Radare | 7.8 | Apr 15 | radare2 < 6.1.4 Command Injection via PDB Parser print_gvars() |
| CVE-2025-63745 | RA Radare2 Radare | 5.5 | Nov 14 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c |
| CVE-2025-63744 | RA Radare2 Radare | 4.3 | Nov 14 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c |
| CVE-2025-60361 | RA Radare2 Radare | 3.3 | Oct 17 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open |
| CVE-2025-60359 | RA Radare2 Radare | 5.5 | Oct 17 | radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new |
| CVE-2025-60360 | RA Radare2 Radare | 5.5 | Oct 17 | radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init |
| CVE-2025-60358 | RA Radare2 Radare | 5.5 | Oct 16 | radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations |
| CVE-2025-5648 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability was found in Radare2 5.9.9 |
| CVE-2025-5647 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability was found in Radare2 5.9.9 and classified as problematic |
| CVE-2025-5646 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability has been found in Radare2 5.9.9 and classified as problematic |
| CVE-2025-5645 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability, which was classified as problematic, was found in Radare2 5.9.9 |
| CVE-2025-5644 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9 |
| CVE-2025-5643 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability classified as problematic was found in Radare2 5.9.9 |
| CVE-2025-5642 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability classified as problematic has been found in Radare2 5.9.9 |
| CVE-2025-5641 | RA Radare2 Radare | 2.5 | Jun 5 | A vulnerability was found in Radare2 5.9.9 |
| CVE-2025-1864 | RA Radare2 Radare | 9.8 | Mar 3 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9 |
| CVE-2025-1744 | RA Radare2 Radare | 9.8 | Feb 28 | Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9 |
| CVE-2025-1378 | RA Radare2 Radare | 3.3 | Feb 17 | A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286 |
| CVE-2024-29646 | RA Radare2 Radare | 9.8 | Dec 17 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields |
| CVE-2024-11858 | RA Radare2 Radare | 7.8 | Dec 15 | A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files |
| CVE-2024-29645 | RA Radare2 Radare | 7.8 | Dec 2 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function |
| CVE-2024-48241 | RA Radare2 Radare | 5.5 | Oct 30 | An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function |
| CVE-2024-26475 | RA Radare2 Radare | 5.5 | Mar 14 | An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function |
| CVE-2023-47016 | RA Radare2 Radare | 7.5 | Nov 22 | radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h |
| CVE-2023-46570 | RA Radare2 Radare | 9.8 | Oct 28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h |
| CVE-2023-46569 | RA Radare2 Radare | 9.8 | Oct 28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h |
| CVE-2023-5686 | RA Radare2 Radare | 8.8 | Oct 20 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0 |
| CVE-2022-28073 | RA Radare2 Radare | 7.5 | Aug 22 | A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0 |
| CVE-2022-28072 | RA Radare2 Radare | 7.5 | Aug 22 | A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0 |
| CVE-2022-28071 | RA Radare2 Radare | 7.5 | Aug 22 | A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0 |
| CVE-2022-28070 | RA Radare2 Radare | 7.5 | Aug 22 | A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0 |
| CVE-2022-28069 | RA Radare2 Radare | 7.5 | Aug 22 | A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0 |
| CVE-2022-28068 | RA Radare2 Radare | 7.5 | Aug 22 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0 |
| CVE-2023-4322 | RA Radare2 Radare | 9.8 | Aug 14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0 |