Vulnerability · Published Jul 5, 2026 · Assigned by VulDB

CVE-2026-14761radareorg radare2 str.c r_str_append integer overflow

Low 3.3

In plain English

A low-severity integer overflow in radare2 from radareorg. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 9% of all known vulnerabilities).

Severity (CVSS 3.1)3.3Low

Exploit odds (30 days)0.2%top 91.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Ubuntu:25.10	radare2	no fix listed	UBUNTU-CVE-2026-14761
Ubuntu:26.04:LTS	radare2	no fix listed	UBUNTU-CVE-2026-14761
Ubuntu:26.10	radare2	no fix listed	UBUNTU-CVE-2026-14761

Affected products (as reported)

Vendor	Product	Versions
radareorg	radare2	6.1.06.1.16.1.26.1.36.1.46.1.56.1.6

Weakness: CWE-190, CWE-189 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

References

VDB-376350 | radareorg radare2 str.c r_str_append integer overflow vdb-entry, technical-description
VDB-376350 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-14761 | CVE Analysis and Report third-party-advisory
Submit #850385 | radareorg radare2 6.1.6 Integer Overflow third-party-advisory
https://github.com/radareorg/radare2/issues/26045 exploit, issue-tracking
https://github.com/radareorg/radare2/commit/a20a56917ae85d732e683f8d9078bdcfee92446c patch
https://github.com/radareorg/radare2/ product