Hex-Rays
9 CVEs across 2 Hex-Rays products. Browse Hex-Rays vulnerabilities, severities, and proof-of-concept exploits.
Hex-Rays products with known CVEs
Hex-Rays CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-45181 | Medium | 6.5 | 2026-05-09 | Hex-Rays IDA Pro 9.2 and 9.3 before 9.3sp2 does not block Clang dependency-file generation (via argument injection), which allows attackers to place their code… |
CVE-2024-44083 | High | 7.5 | 2024-08-19 | ida64.dll in Hex-Rays IDA Pro through 8.4 crashes when there is a section that has many jumps linked, and the final jump corresponds to the payload from where… |
CVE-2022-32441 | Medium | 5.5 | 2022-07-07 | A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service (DoS) via a crafted file. Related to Data from Faulting Address cont… |
CVE-2014-9458 | | | 2015-01-02 | Heap-based buffer overflow in the GDB debugger module in Hex-Rays IDA Pro before 6.6 cumulative fix 2014-12-24 allows remote GDB servers to have unspecified im… |
CVE-2011-4783 | | | 2011-12-27 | The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper hand… |
CVE-2011-1054 | | | 2011-02-21 | Unspecified vulnerability in the PEF input file loader in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors. |
CVE-2011-1053 | | | 2011-02-21 | Unspecified vulnerability in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (o… |
CVE-2011-1052 | | | 2011-02-21 | Integer overflow in the PSX/GEOS input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation. |
CVE-2011-1051 | | | 2011-02-21 | Integer overflow in the COFF/EPOC/EXPLOAD input file loaders in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to memory allocation. |
CVE-2011-1050 | | | 2011-02-21 | Unspecified vulnerability in Hex-Rays IDA Pro 5.7 and 6.0 has unknown impact and attack vectors related to "converson of string encodings" and "inconsistencies… |
CVE-2011-1049 | | | 2011-02-21 | Buffer overflow in the Mach-O input file loader in Hex-Rays IDA Pro 5.7 and 6.0 allows user-assisted remote attackers to cause a denial of service (crash) and… |