Skip to content
Radare2 vulnerabilities
Newest
-
radare2
radare2: Remote code execution when loading Pebble/SMD binary
CVE-2026-108387
8.5 High
-
radare2
radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism
CVE-2026-112077
6.3 Medium
-
radare radare2
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
CVE-2026-81883
3.3 Low
-
radare radare2
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
CVE-2026-81885
5.5 Medium
-
radare radare2
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
CVE-2026-81882
3.3 Low
-
radare radare2
radare2: Uncontrolled memory allocation in radare2 dmp64 parser
CVE-2026-81886
5.5 Medium
-
radare radare2
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
CVE-2026-81884
2.5 Low
-
radare radare2
radare2: Uncontrolled resource consumption in radare2 PEF loader
CVE-2026-81880
5.5 Medium
-
radare radare2
radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling
CVE-2026-81879
5.5 Medium
-
radare radare2
radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser
CVE-2026-81878
5.5 Medium
-
radare radare2
radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
CVE-2026-81881
3.3 Low
-
radare radare2
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
CVE-2026-14789
4.8 Medium
-
radare radare2
radareorg radare2 cfile.c r_core_bin_load use after free
CVE-2026-14788
4.8 Medium
-
radare radare2
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
CVE-2026-14787
4.8 Medium
-
radare radare2
radareorg radare2 str.c r_str_word_get0set integer overflow
CVE-2026-14786
4.8 Medium
-
radare radare2
radareorg radare2 str.c r_str_append integer overflow
CVE-2026-14761
4.8 Medium
-
radare radare2
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
CVE-2026-14760
4.8 Medium
-
radare radare2
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
CVE-2026-14759
4.8 Medium
-
radare radare2
radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow
CVE-2026-14758
4.8 Medium
-
radare radare2
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
CVE-2026-14757
4.8 Medium
-
radare radare2
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
CVE-2026-8696
Fix available
8.7 High
-
radare radare2
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
CVE-2026-8695
Fix available
8.7 High
-
radare radare2
radare2 < 6.1.4 Project Notes Path Traversal via Symlink
CVE-2026-6941
6.9 Medium
-
radare radare2
radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
CVE-2026-6940
6.9 Medium
-
radare radare2
radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names
CVE-2026-40517
8.4 High
-
radare radare2
radare2 Command Injection via DWARF Parameter Names
CVE-2026-40527
8.5 High
-
radare radare2
radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB...
CVE-2026-41015
7.4 High
-
radare radare2
radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()
CVE-2026-40499
Fix available
8.4 High
-
radare2
Radare2 Mach-O File mach0.c walk_exports_trie resource consumption
CVE-2026-4174
Disputed
4.8 Medium
-
radare radare2
Radare2 radiff2 pal.c r_cons_pal_init memory corruption
CVE-2025-5648
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption
CVE-2025-5647
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption
CVE-2025-5646
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 pal.c r_cons_pal_init memory corruption
CVE-2025-5645
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c r_cons_flush use after free
CVE-2025-5644
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c cons_stack_load memory corruption
CVE-2025-5643
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 pal.c r_cons_pal_init memory corruption
CVE-2025-5642
Disputed
2.0 Low
-
radare radare2
Radare2 radiff2 cons.c r_cons_is_breaked memory corruption
CVE-2025-5641
Disputed
2.0 Low
-
radare radare2
Buffer Overflow and Potential Code Execution in Radare2
CVE-2025-1864
10.0 Critical
-
radare radare2
Out-of-bounds Write in radare2
CVE-2025-1744
Fix available
10.0 Critical
-
radare radare2
radare2 rasm2 rasm2.c memory corruption
CVE-2025-1378
Fix available
4.8 Medium
-
radare radare2
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can...
CVE-2021-32495
10.0 Critical
-
radare radare2
Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This...
CVE-2021-32494
10.0 Critical
-
radare radare2
A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation...
CVE-2020-27794
Fix available
9.1 Critical
-
radare radare2
An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c....
CVE-2020-27793
Fix available
7.5 High
-
radare radare2
A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when...
CVE-2020-27795
Fix available
7.5 High
-
radare radare2
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping...
CVE-2021-4021
Fix available
7.5 High
-
radare radare2, fedoraproject fedora +1 more
A vulnerability was found in Radare2 in version 5.3.1. Improper input validation when reading a...
CVE-2021-3673
Fix available
7.5 High
-
radare radare2, fedoraproject fedora +1 more
In radare2 through 5.3.0 there is a double free vulnerability in the pyc parse via a crafted file...
CVE-2021-32613
Fix available
5.5 Medium
-
radare radare2, fedoraproject fedora +1 more
Command injection in Radare2
CVE-2020-15121
Fix available
7.4 High