Priority LOW 36
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
Vulnerabilities
184 records
TI-2026-76239 CVE-2026-112077 · GHSA-x2f6-pg54-586w
Protection mechanism failure in radare2 HTTP sandbox policy handler
Priority LOW 28
A vulnerability was detected in radareorg radare2 6.2.0/6.2.2.
TI-2026-56494 CVE-2026-81883
radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode
Priority MEDIUM 49
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
TI-2026-56496 CVE-2026-81885
radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser
Priority MEDIUM 58
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
TI-2026-56493 CVE-2026-81882
radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser
Priority LOW 26
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 24
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
TI-2026-56495 CVE-2026-81884
radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser
Priority MEDIUM 49
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
Priority LOW 24
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
Priority MEDIUM 60
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
TI-2026-56489 CVE-2026-81878
radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser
Priority MEDIUM 58
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
TI-2026-56492 CVE-2026-81881
radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser
Priority LOW 20
radare2 is a UNIX-like reverse engineering framework and command-line toolset.
TI-2026-12465 CVE-2026-14789 · GHSA-v7rq-pxrj-v6m8
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
Priority MEDIUM 55
A vulnerability was detected in radareorg radare2 up to 6.1.6.
TI-2026-12464 CVE-2026-14788 · GHSA-3h4h-fp54-55h6
radareorg radare2 cfile.c r_core_bin_load use after free
Priority MEDIUM 55
A security vulnerability has been detected in radareorg radare2 up to 6.1.6.
TI-2026-12463 CVE-2026-14787 · GHSA-4m93-7925-jv2p
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
Priority MEDIUM 55
A weakness has been identified in radareorg radare2 up to 6.1.6.
TI-2026-12462 CVE-2026-14786 · GHSA-2hgc-c8xq-92w3
radareorg radare2 str.c r_str_word_get0set integer overflow
Priority MEDIUM 55
A security flaw has been discovered in radareorg radare2 up to 6.1.6.
TI-2026-12439 CVE-2026-14761 · GHSA-q4m4-82h9-qfgv
radareorg radare2 str.c r_str_append integer overflow
Priority MEDIUM 55
A security vulnerability has been detected in radareorg radare2 up to 6.1.6.
TI-2026-12438 CVE-2026-14760 · GHSA-mmvx-pw62-p5qq
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
Priority MEDIUM 55
A weakness has been identified in radareorg radare2 up to 6.1.6.
TI-2026-12437 CVE-2026-14759 · GHSA-5c42-mjgc-pm69
radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow
Priority MEDIUM 55
A security flaw has been discovered in radareorg radare2 up to 6.1.6.
TI-2026-12436 CVE-2026-14758 · GHSA-f973-xj97-7vpp
radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow
Priority MEDIUM 55
A vulnerability was identified in radareorg radare2 up to 6.1.6.
TI-2026-12435 CVE-2026-14757 · GHSA-m7vh-m7f4-7h43
radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow
Priority MEDIUM 55
A vulnerability was determined in radareorg radare2 up to 6.1.6.
TI-2026-07640 CVE-2026-8696 · GHSA-8j42-xqfj-g726
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
Priority HIGH 77
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending…
TI-2026-07639 CVE-2026-8695 · GHSA-jrmh-3vm7-w5m4
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
Priority HIGH 77
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThrea…
TI-2026-06081 CVE-2026-6942 · GHSA-g65f-grqm-9jg5
radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass
Priority HIGH 81
radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-control…
TI-2026-06080 CVE-2026-6941 · GHSA-2x93-pf6j-8c9x
radare2 < 6.1.4 Project Notes Path Traversal via Symlink
Priority MEDIUM 64
radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive con…
TI-2026-06079 CVE-2026-6940 · GHSA-x2x5-gj4j-p6qw
radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
Priority HIGH 66
radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projec…