Advisories · Technology

radareorg radare2.

Every CVE that names radareorg radare2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-108387 CVE record

CVSS 8.5 High

radare2: Remote code execution when loading Pebble/SMD binary
- radareorg radare2
- Command injection
Not analysed yet 4 Nov 2026
CVE-2026-112077 CVE record

CVSS 6.3 Medium

radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism
- radareorg radare2
- CWE-693
Not analysed yet 19 Oct 2026
CVE-2026-81883 CVE record

CVSS 3.3 Low

radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
- radareorg radare2
- Memory corruption
Not analysed yet 22 Sept 2026
CVE-2026-81885 CVE record

CVSS 5.5 Medium

radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
- radareorg radare2
- Denial of service
Not analysed yet 22 Sept 2026
CVE-2026-81882 CVE record

CVSS 3.3 Low

radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
- radareorg radare2
- Memory corruption
- CWE-170
Not analysed yet 22 Sept 2026
CVE-2026-81886 CVE record

CVSS 5.5 Medium

radare2: Uncontrolled memory allocation in radare2 dmp64 parser
- radareorg radare2
- Denial of service
Not analysed yet 22 Sept 2026
CVE-2026-81884 CVE record

CVSS 2.5 Low

radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
- radareorg radare2
- Memory corruption
Not analysed yet 22 Sept 2026
CVE-2026-81880 CVE record

CVSS 5.5 Medium

radare2: Uncontrolled resource consumption in radare2 PEF loader
- radareorg radare2
- Denial of service
Not analysed yet 22 Sept 2026
CVE-2026-81879 CVE record

CVSS 5.5 Medium

radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling
- radareorg radare2
- Memory corruption
Not analysed yet 22 Sept 2026
CVE-2026-81878 CVE record

CVSS 5.5 Medium

radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser
- radareorg radare2
- Memory corruption
Not analysed yet 22 Sept 2026
CVE-2026-81881 CVE record

CVSS 3.3 Low

radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
- radareorg radare2
- Memory corruption
Not analysed yet 22 Sept 2026
CVE-2026-14789 CVE record

CVSS 4.8 Medium

radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
- radareorg radare2
- Memory corruption
Not analysed yet 6 Jul 2026
CVE-2026-14788 CVE record

CVSS 4.8 Medium

radareorg radare2 cfile.c r_core_bin_load use after free
- radareorg radare2
- Memory corruption
Not analysed yet 6 Jul 2026
CVE-2026-14787 CVE record

CVSS 4.8 Medium

radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 6 Jul 2026
CVE-2026-14786 CVE record

CVSS 4.8 Medium

radareorg radare2 str.c r_str_word_get0set integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 6 Jul 2026
CVE-2026-14761 CVE record

CVSS 4.8 Medium

radareorg radare2 str.c r_str_append integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 5 Jul 2026
CVE-2026-14760 CVE record

CVSS 4.8 Medium

radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
- radareorg radare2
- Memory corruption
Not analysed yet 5 Jul 2026
CVE-2026-14759 CVE record

CVSS 4.8 Medium

radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
- radareorg radare2
- Memory corruption
Not analysed yet 5 Jul 2026
CVE-2026-14758 CVE record

CVSS 4.8 Medium

radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 5 Jul 2026
CVE-2026-14757 CVE record

CVSS 4.8 Medium

radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
- radareorg radare2
- Memory corruption
- CWE-189
Not analysed yet 5 Jul 2026
CVE-2026-6941 CVE record

CVSS 6.9 Medium

radare2 < 6.1.4 Project Notes Path Traversal via Symlink
- radareorg radare2
- Path traversal
Not analysed yet 23 Apr 2026
CVE-2026-6940 CVE record

CVSS 6.9 Medium

radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
- radareorg radare2
- Path traversal
Not analysed yet 23 Apr 2026
CVE-2026-40517 CVE record

CVSS 8.4 High

radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names
- radareorg radare2
- Command injection
Not analysed yet 22 Apr 2026
CVE-2026-40527 CVE record

CVSS 8.5 High

radare2 Command Injection via DWARF Parameter Names
- radareorg radare2
- Command injection
Not analysed yet 17 Apr 2026
CVE-2026-40499 CVE record

CVSS 8.4 High

radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()
- radareorg radare2
- Command injection
Not analysed yet 15 Apr 2026
CVE-2025-1864 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Buffer Overflow and Potential Code Execution in Radare2
- radareorg radare2
- Memory corruption
Not analysed yet 3 Mar 2025
CVE-2025-1744 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Out-of-bounds Write in radare2
- radareorg radare2
- Memory corruption
Not analysed yet 28 Feb 2025
CVE-2023-5686 CVE record

CVSS 5.1 Medium

Heap-based Buffer Overflow in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 20 Oct 2023
CVE-2023-4322 CVE record

CVSS 7.3 High

Heap-based Buffer Overflow in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 14 Aug 2023
CVE-2023-1605 CVE record

CVSS 7.5 High

Denial of Service in radareorg/radare2
- radareorg/radare2
- Denial of service
Not analysed yet 23 Mar 2023
CVE-2023-0302 CVE record

CVSS 8.6 High

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in radareorg/radare2
- radareorg/radare2
- CWE-75
Not analysed yet 15 Jan 2023
CVE-2022-4843 CVE record

CVSS 4.4 Medium

NULL Pointer Dereference in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 29 Dec 2022
CVE-2022-4398 CVE record

CVSS 6.1 Medium

Integer Overflow or Wraparound in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 10 Dec 2022
CVE-2022-1899 CVE record

CVSS 7.7 High

Out-of-bounds Read in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 26 May 2022
CVE-2022-1809 CVE record

CVSS 7.4 High

Access of Uninitialized Pointer in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 21 May 2022
CVE-2022-1714 CVE record

CVSS 7.9 High

Out-of-bounds Read in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 13 May 2022
CVE-2022-1649 CVE record

CVSS 7.6 High

Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 10 May 2022
CVE-2022-1451 CVE record

CVSS 7.1 High

Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 24 Apr 2022
CVE-2022-1452 CVE record

CVSS 7.1 High

Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 24 Apr 2022
CVE-2022-1444 CVE record

CVSS 7.5 High

heap-use-after-free in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 23 Apr 2022
CVE-2022-1437 CVE record

CVSS 5.3 Medium

Heap-based Buffer Overflow in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 22 Apr 2022
CVE-2022-1383 CVE record

CVSS 4.8 Medium

Heap-based Buffer Overflow in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 17 Apr 2022
CVE-2022-1382 CVE record

CVSS 5.3 Medium

NULL Pointer Dereference in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 16 Apr 2022
CVE-2022-1297 CVE record

CVSS 6.6 Medium

Out-of-bounds Read in r_bin_ne_get_entrypoints function in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 11 Apr 2022
CVE-2022-1296 CVE record

CVSS 6.6 Medium

Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 11 Apr 2022
CVE-2022-1284 CVE record

CVSS 7.5 High

heap-use-after-free in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 8 Apr 2022
CVE-2022-1283 CVE record

CVSS 6.6 Medium

NULL Pointer Dereference in r_bin_ne_get_entrypoints function in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 8 Apr 2022
CVE-2022-1240 CVE record

CVSS 7.6 High

Heap buffer overflow in libr/bin/format/mach0/mach0.c in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 6 Apr 2022
CVE-2022-1237 CVE record

CVSS 7.6 High

Improper Validation of Array Index in radareorg/radare2
- radareorg/radare2
- CWE-129
Not analysed yet 6 Apr 2022
CVE-2022-1238 CVE record

CVSS 7.6 High

Out-of-bounds Write in libr/bin/format/ne/ne.c in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 6 Apr 2022
CVE-2022-1244 CVE record

CVSS 7.5 High

heap-buffer-overflow in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 5 Apr 2022
CVE-2022-1207 CVE record

CVSS 6.6 Medium

Out-of-bounds read in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 1 Apr 2022
CVE-2022-1052 CVE record

CVSS 7.3 High

Heap Buffer Overflow in iterate_chained_fixups in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 24 Mar 2022
CVE-2022-1061 CVE record

CVSS 7.3 High

Heap Buffer Overflow in parseDragons in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 24 Mar 2022
CVE-2022-1031 CVE record

CVSS 7.3 High

Use After Free in op_is_set_bp in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 22 Mar 2022
CVE-2022-0849 CVE record

CVSS 7.3 High

Use After Free in r_reg_get_name_idx in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 5 Mar 2022
CVE-2022-0695 CVE record

CVSS 6.8 Medium

Denial of Service in radareorg/radare2
- radareorg/radare2
- Denial of service
Not analysed yet 24 Feb 2022
CVE-2022-0476 CVE record

CVSS 7.3 High

Denial of Service in radareorg/radare2
- radareorg/radare2
- Denial of service
Not analysed yet 23 Feb 2022
CVE-2022-0713 CVE record

CVSS 5.3 Medium

Heap-based Buffer Overflow in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 22 Feb 2022
CVE-2022-0712 CVE record

CVSS 5.9 Medium

NULL Pointer Dereference in radareorg/radare2
- radareorg/radare2
- Memory corruption
Not analysed yet 22 Feb 2022