Radareorg Radare2 vulnerabilities

• radare2 radare2: Remote code execution when loading Pebble/SMD binary CVE-2026-108387 8.5 HighNovember 4, 2026
• radare2 radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism CVE-2026-112077 6.3 MediumOctober 19, 2026
• radare radare2 radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode CVE-2026-81883 3.3 LowSeptember 22, 2026
• radare radare2 radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser CVE-2026-81885 5.5 MediumSeptember 22, 2026
• radare radare2 radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser CVE-2026-81882 3.3 LowSeptember 22, 2026
• radare radare2 radare2: Uncontrolled memory allocation in radare2 dmp64 parser CVE-2026-81886 5.5 MediumSeptember 22, 2026
• radare radare2 radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser CVE-2026-81884 2.5 LowSeptember 22, 2026
• radare radare2 radare2: Uncontrolled resource consumption in radare2 PEF loader CVE-2026-81880 5.5 MediumSeptember 22, 2026
• radare radare2 radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling CVE-2026-81879 5.5 MediumSeptember 22, 2026
• radare radare2 radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser CVE-2026-81878 5.5 MediumSeptember 22, 2026
• radare radare2 radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser CVE-2026-81881 3.3 LowSeptember 22, 2026
• radare radare2 radareorg radare2 Memory64ListStream mdmp.c stack-based overflow CVE-2026-14789 4.8 MediumJuly 6, 2026
• radare radare2 radareorg radare2 cfile.c r_core_bin_load use after free CVE-2026-14788 4.8 MediumJuly 6, 2026
• radare radare2 radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow CVE-2026-14787 4.8 MediumJuly 6, 2026
• radare radare2 radareorg radare2 str.c r_str_word_get0set integer overflow CVE-2026-14786 4.8 MediumJuly 6, 2026
• radare radare2 radareorg radare2 str.c r_str_append integer overflow CVE-2026-14761 4.8 MediumJuly 5, 2026
• radare radare2 radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free CVE-2026-14760 4.8 MediumJuly 5, 2026
• radare radare2 radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow CVE-2026-14759 4.8 MediumJuly 5, 2026
• radare radare2 radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow CVE-2026-14758 4.8 MediumJuly 5, 2026
• radare radare2 radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow CVE-2026-14757 4.8 MediumJuly 5, 2026
• radareorg radare2-mcp, radare radare2 mcp server +1 more radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass CVE-2026-6942 9.3 CriticalApril 23, 2026
• radare radare2 radare2 < 6.1.4 Project Notes Path Traversal via Symlink CVE-2026-6941 6.9 MediumApril 23, 2026
• radare radare2 radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion CVE-2026-6940 6.9 MediumApril 23, 2026
• radare radare2 radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names CVE-2026-40517 8.4 HighApril 22, 2026
• radare radare2 radare2 Command Injection via DWARF Parameter Names CVE-2026-40527 8.5 HighApril 17, 2026
• radare radare2 radare2 < 6.1.4 Command Injection via PDB Parser print_gvars() CVE-2026-40499 Fix available 8.4 HighApril 15, 2026
• radare radare2 Buffer Overflow and Potential Code Execution in Radare2 CVE-2025-1864 10.0 CriticalMarch 3, 2025
• radare radare2 Out-of-bounds Write in radare2 CVE-2025-1744 Fix available 10.0 CriticalFebruary 28, 2025
• radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 more Heap-based Buffer Overflow in radareorg/radare2 CVE-2023-5686 5.1 MediumOctober 20, 2023
• radare radare2, radareorg radareorg/radare2, fedoraproject fedora +2 more Heap-based Buffer Overflow in radareorg/radare2 CVE-2023-4322 7.3 HighAugust 14, 2023
• radare radare2, radareorg radareorg/radare2 +1 more Denial of Service in radareorg/radare2 CVE-2023-1605 Fix available 7.5 HighMarch 23, 2023
• radare radare2, radareorg radareorg/radare2 +1 more Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2 CVE-2023-0302 Fix available 8.6 HighJanuary 15, 2023
• radare radare2, radareorg radareorg/radare2 +1 more NULL Pointer Dereference in radareorg/radare2 CVE-2022-4843 4.4 MediumDecember 29, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Integer Overflow or Wraparound in radareorg/radare2 CVE-2022-4398 Fix available 6.1 MediumDecember 10, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Out-of-bounds Read in radareorg/radare2 CVE-2022-1899 Fix available 7.7 HighMay 26, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Access of Uninitialized Pointer in radareorg/radare2 CVE-2022-1809 Fix available 7.4 HighMay 21, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Out-of-bounds Read in radareorg/radare2 CVE-2022-1714 Fix available 7.9 HighMay 13, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2 CVE-2022-1649 Fix available 7.6 HighMay 10, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2 CVE-2022-1451 Fix available 7.1 HighApril 24, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2 CVE-2022-1452 Fix available 7.1 HighApril 24, 2022
• radare radare2, radareorg radareorg/radare2 +1 more heap-use-after-free in radareorg/radare2 CVE-2022-1444 Fix available 7.5 HighApril 23, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Heap-based Buffer Overflow in radareorg/radare2 CVE-2022-1437 Fix available 5.3 MediumApril 22, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Heap-based Buffer Overflow in radareorg/radare2 CVE-2022-1383 Fix available 4.8 MediumApril 17, 2022
• radare radare2, radareorg radareorg/radare2 +1 more NULL Pointer Dereference in radareorg/radare2 CVE-2022-1382 Fix available 5.3 MediumApril 16, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Out-of-bounds Read in r_bin_ne_get_entrypoints function in radareorg/radare2 CVE-2022-1297 Fix available 6.6 MediumApril 11, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare2 CVE-2022-1296 Fix available 6.6 MediumApril 11, 2022
• radare radare2, radareorg radareorg/radare2 +1 more heap-use-after-free in radareorg/radare2 CVE-2022-1284 Fix available 7.5 HighApril 8, 2022
• radare radare2, radareorg radareorg/radare2 +1 more NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2 CVE-2022-1283 Fix available 6.6 MediumApril 8, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2 CVE-2022-1240 Fix available 7.6 HighApril 6, 2022
• radare radare2, radareorg radareorg/radare2 +1 more Improper Validation of Array Index in radareorg/radare2 CVE-2022-1237 Fix available 7.6 HighApril 6, 2022
• Show olderLoading…