Skip to content
Radare Radare2 vulnerabilities
-
radare radare2
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
CVE-2026-81883
3.3 Low
-
radare radare2
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
CVE-2026-81885
5.5 Medium
-
radare radare2
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
CVE-2026-81882
3.3 Low
-
radare radare2
radare2: Uncontrolled memory allocation in radare2 dmp64 parser
CVE-2026-81886
5.5 Medium
-
radare radare2
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
CVE-2026-81884
2.5 Low
-
radare radare2
radare2: Uncontrolled resource consumption in radare2 PEF loader
CVE-2026-81880
5.5 Medium
-
radare radare2
radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling
CVE-2026-81879
5.5 Medium
-
radare radare2
radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser
CVE-2026-81878
5.5 Medium
-
radare radare2
radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
CVE-2026-81881
3.3 Low
-
radare radare2
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
CVE-2026-14789
4.8 Medium
-
radare radare2
radareorg radare2 cfile.c r_core_bin_load use after free
CVE-2026-14788
4.8 Medium
-
radare radare2
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
CVE-2026-14787
4.8 Medium
-
radare radare2
radareorg radare2 str.c r_str_word_get0set integer overflow
CVE-2026-14786
4.8 Medium
-
radare radare2
radareorg radare2 str.c r_str_append integer overflow
CVE-2026-14761
4.8 Medium
-
radare radare2
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
CVE-2026-14760
4.8 Medium
-
radare radare2
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
CVE-2026-14759
4.8 Medium
-
radare radare2
radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow
CVE-2026-14758
4.8 Medium
-
radare radare2
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
CVE-2026-14757
4.8 Medium
-
radare radare2
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
CVE-2026-8696
Fix available
8.7 High
-
radare radare2
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
CVE-2026-8695
Fix available
8.7 High
-
radareorg radare2-mcp, radare radare2 mcp server +1 more
radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass
CVE-2026-6942
9.3 Critical
-
radare radare2
radare2 < 6.1.4 Project Notes Path Traversal via Symlink
CVE-2026-6941
6.9 Medium
-
radare radare2
radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
CVE-2026-6940
6.9 Medium
-
radare radare2
radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names
CVE-2026-40517
8.4 High
-
radare radare2
radare2 Command Injection via DWARF Parameter Names
CVE-2026-40527
8.5 High
-
radare radare2
radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB...
CVE-2026-41015
7.4 High
-
radare radare2
radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()
CVE-2026-40499
Fix available
8.4 High
-
radare radare2
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the...
CVE-2025-63745
5.5 Medium
-
radare radare2
A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the...
CVE-2025-63744
4.3 Medium
-
radare radare2
radare2 v5.9.8 and before contains a memory leak in the function bochs_open.
CVE-2025-60361
Fix available
3.3 Low
-
radare radare2
radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init.
CVE-2025-60360
Fix available
5.5 Medium
-
radare radare2
radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new.
CVE-2025-60359
Fix available
5.5 Medium
-
radare radare2
radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.
CVE-2025-60358
Fix available
5.5 Medium
-
radare radare2
Radare2 radiff2 pal.c r_cons_pal_init memory corruption
CVE-2025-5648
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption
CVE-2025-5647
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption
CVE-2025-5646
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 pal.c r_cons_pal_init memory corruption
CVE-2025-5645
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c r_cons_flush use after free
CVE-2025-5644
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c cons_stack_load memory corruption
CVE-2025-5643
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 pal.c r_cons_pal_init memory corruption
CVE-2025-5642
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c r_cons_is_breaked memory corruption
CVE-2025-5641
Disputed
2.0 Low
-
radare radare2
Buffer Overflow and Potential Code Execution in Radare2
CVE-2025-1864
10.0 Critical
-
radare radare2
Out-of-bounds Write in radare2
CVE-2025-1744
Fix available
10.0 Critical
-
radare radare2
radare2 rasm2 rasm2.c memory corruption
CVE-2025-1378
Fix available
4.8 Medium
-
radare radare2
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary...
CVE-2024-29646
9.8 Critical
-
radare radare2
Radare2: command injection via pebble application files in radare2
CVE-2024-11858
8.6 High
-
radare radare2
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary...
CVE-2024-29645
Fix available
7.8 High
-
radare radare2
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service...
CVE-2024-48241
Fix available
5.5 Medium
-
radare radare2
An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local...
CVE-2024-26475
Public exploit
5.5 Medium
-
radare radare2
radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a...
CVE-2023-47016
Fix available
7.5 High
- Show olderLoading…