Rradareorg

Products

Exploited and recent CVEs

• CVE-2026-108387 High 8.5 radare2: Remote code execution when loading Pebble/SMD binary 0.1%
• CVE-2026-112077 Medium 5.6 radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism 0.3%
• CVE-2026-81883 Low 3.3 radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode 0.2%
• CVE-2026-81885 Medium 5.5 radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser 0.2%
• CVE-2026-81882 Low 3.3 radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser 0.2%
• CVE-2026-81886 Medium 5.5 radare2: Uncontrolled memory allocation in radare2 dmp64 parser 0.2%
• CVE-2026-81884 Low 2.5 radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser 0.2%
• CVE-2026-81880 Medium 5.5 radare2: Uncontrolled resource consumption in radare2 PEF loader 0.1%
• CVE-2026-81879 Medium 5.5 radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling 0.2%
• CVE-2026-81878 Medium 5.5 radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser 0.2%
• CVE-2026-81881 Low 3.3 radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser 0.2%
• CVE-2026-14789 Low 3.3 radareorg radare2 Memory64ListStream mdmp.c stack-based overflow 0.2%
• CVE-2026-14788 Low 3.3 radareorg radare2 cfile.c r_core_bin_load use after free 0.2%
• CVE-2026-14787 Low 3.3 radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow 0.2%
• CVE-2026-14786 Low 3.3 radareorg radare2 str.c r_str_word_get0set integer overflow 0.2%
• CVE-2026-14761 Low 3.3 radareorg radare2 str.c r_str_append integer overflow 0.2%
• CVE-2026-14760 Low 3.3 radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free 0.2%
• CVE-2026-14759 Low 3.3 radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow 0.2%
• CVE-2026-14758 Low 3.3 radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow 0.2%
• CVE-2026-14757 Medium 5.3 radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow 0.2%
• CVE-2026-6942 Critical 9.8 radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass 1.9%
• CVE-2026-6941 Medium 6.6 radare2 < 6.1.4 Project Notes Path Traversal via Symlink 0.2%
• CVE-2026-6940 High 7.1 radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion 0.2%
• CVE-2026-40517 High 7.8 radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names 1.1%
• CVE-2026-40527 High 7.8 radare2 Command Injection via DWARF Parameter Names 0.9%
• CVE-2026-40499 High 8.4 radare2 < 6.1.4 Command Injection via PDB Parser print_gvars() 1.2%
• CVE-2025-1864 Critical 10.0 Buffer Overflow and Potential Code Execution in Radare2 0.5%
• CVE-2025-1744 Critical 10.0 Out-of-bounds Write in radare2 0.5%
• CVE-2023-5686 Medium 5.1 Heap-based Buffer Overflow in radareorg/radare2 0.8%
• CVE-2023-4322 High 7.3 Heap-based Buffer Overflow in radareorg/radare2 0.9%