RA
Vendor
radareorg
27
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112077 | RA radare2 radareorg | 5.6 | Oct 19 | radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism |
| CVE-2026-81883 | RA radare2 radareorg | 3.3 | Sep 22 | radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode |
| CVE-2026-81885 | RA radare2 radareorg | 5.5 | Sep 22 | radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser |
| CVE-2026-81882 | RA radare2 radareorg | 6.1 | Sep 22 | radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser |
| CVE-2026-81886 | RA radare2 radareorg | 5.5 | Sep 22 | radare2: Uncontrolled memory allocation in radare2 dmp64 parser |
| CVE-2026-81884 | RA radare2 radareorg | 3.3 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser |
| CVE-2026-81880 | RA radare2 radareorg | 5.5 | Sep 22 | radare2: Uncontrolled resource consumption in radare2 PEF loader |
| CVE-2026-81879 | RA radare2 radareorg | 6.1 | Sep 22 | radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling |
| CVE-2026-81878 | RA radare2 radareorg | 5.5 | Sep 22 | radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser |
| CVE-2026-81881 | RA radare2 radareorg | 4.4 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser |
| CVE-2026-14789 | RA radare2 radareorg | 7.8 | Jul 6 | radareorg radare2 Memory64ListStream mdmp.c stack-based overflow |
| CVE-2026-14788 | RA radare2 radareorg | 7.8 | Jul 6 | radareorg radare2 cfile.c r_core_bin_load use after free |
| CVE-2026-14787 | RA radare2 radareorg | 7.8 | Jul 6 | radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow |
| CVE-2026-14786 | RA radare2 radareorg | 5.5 | Jul 6 | radareorg radare2 str.c r_str_word_get0set integer overflow |
| CVE-2026-14761 | RA radare2 radareorg | 5.5 | Jul 5 | radareorg radare2 str.c r_str_append integer overflow |
| CVE-2026-14760 | RA radare2 radareorg | 7.8 | Jul 5 | radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free |
| CVE-2026-14759 | RA radare2 radareorg | 7.8 | Jul 5 | radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow |
| CVE-2026-14758 | RA radare2 radareorg | 5.5 | Jul 5 | radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow |
| CVE-2026-14757 | RA radare2 radareorg | 7.8 | Jul 5 | radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow |
| CVE-2026-6942 | RA radare2-mcp radareorg | 8.8 | Apr 23 | radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass |
| CVE-2026-6941 | RA radare2 radareorg | 7.8 | Apr 23 | radare2 < 6.1.4 Project Notes Path Traversal via Symlink |
| CVE-2026-6940 | RA radare2 radareorg | 7.1 | Apr 23 | radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion |
| CVE-2026-40517 | RA radare2 radareorg | 7.8 | Apr 22 | radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names |
| CVE-2026-40527 | RA radare2 radareorg | 7.8 | Apr 17 | radare2 Command Injection via DWARF Parameter Names |
| CVE-2026-40499 | RA radare2 radareorg | 7.8 | Apr 15 | radare2 < 6.1.4 Command Injection via PDB Parser print_gvars() |
| CVE-2025-1864 | RA radare2 radareorg | 9.8 | Mar 3 | Buffer Overflow and Potential Code Execution in Radare2 |
| CVE-2025-1744 | RA radare2 radareorg | 9.8 | Feb 28 | Out-of-bounds Write in radare2 |