CVE-2026-14789 | Low | 3.3 | 2026-07-06 | A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of the file libr/bin/format/mdmp/mdmp.c of… |
CVE-2026-14788 | Low | 3.3 | 2026-07-06 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/co… |
CVE-2026-14787 | Low | 3.3 | 2026-07-06 | A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb… |
CVE-2026-14786 | Low | 3.3 | 2026-07-06 | A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of the file libr/util/str.c. The manipulatio… |
CVE-2026-14761 | Low | 3.3 | 2026-07-05 | A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util… |
CVE-2026-14760 | Low | 3.3 | 2026-07-05 | A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component… |
CVE-2026-14759 | Low | 3.3 | 2026-07-05 | A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/… |
CVE-2026-14758 | Low | 3.3 | 2026-07-05 | A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c o… |
CVE-2026-14757 | Medium | 5.3 | 2026-07-05 | A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulatio… |
CVE-2026-8696 | High | 7.5 | 2026-05-15 | radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denia… |
CVE-2026-8695 | High | 7.5 | 2026-05-15 | radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending… |
CVE-2026-6942 | Critical | 9.8 | 2026-04-23 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing th… |
CVE-2026-6941 | Medium | 6.6 | 2026-04-23 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configure… |
CVE-2026-6940 | High | 7.1 | 2026-04-23 | radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by s… |
CVE-2026-40517 | High | 7.8 | 2026-04-22 | radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary command… |
CVE-2026-40527 | High | 7.8 | 2026-04-17 | radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 com… |
CVE-2026-41015 | High | 7.4 | 2026-04-16 | radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use th… |
CVE-2026-40499 | High | 7.8 | 2026-04-15 | radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary… |
CVE-2025-63745 | Medium | 5.5 | 2025-11-14 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger… |
CVE-2025-63744 | Medium | 4.3 | 2025-11-14 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file c… |
CVE-2025-60361 | Low | 3.3 | 2025-10-17 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open. |
CVE-2025-60360 | Medium | 5.5 | 2025-10-17 | radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init. |
CVE-2025-60359 | Medium | 5.5 | 2025-10-17 | radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new. |
CVE-2025-60358 | Medium | 5.5 | 2025-10-16 | radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations. |
CVE-2025-5648 | Low | 2.5 | 2025-06-05 | A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of… |
CVE-2025-5647 | Low | 2.5 | 2025-06-05 | A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/co… |
CVE-2025-5646 | Low | 2.5 | 2025-06-05 | A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr… |
CVE-2025-5645 | Low | 2.5 | 2025-06-05 | A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of… |
CVE-2025-5644 | Low | 2.5 | 2025-06-05 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr… |
CVE-2025-5643 | Low | 2.5 | 2025-06-05 | A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/… |
CVE-2025-5642 | Low | 2.5 | 2025-06-05 | A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the comp… |
CVE-2025-5641 | Low | 2.5 | 2025-06-05 | A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons… |
CVE-2025-1864 | Critical | 9.8 | 2025-03-03 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2… |
CVE-2025-1744 | Critical | 9.8 | 2025-02-28 | Out-of-bounds Write vulnerability in radareorg radare2 allows
heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9. |
CVE-2025-1378 | Low | 3.3 | 2025-02-17 | A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of th… |
CVE-2024-29646 | Critical | 9.8 | 2024-12-17 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields. |
CVE-2024-11858 | High | 8.6 | 2024-12-15 | A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. M… |
CVE-2024-29645 | High | 7.8 | 2024-12-02 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function. |
CVE-2024-48241 | Medium | 5.5 | 2024-10-30 | An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function. |
CVE-2024-26475 | Medium | 5.5 | 2024-03-14 | An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent fu… |
CVE-2023-47016 | High | 7.5 | 2023-11-22 | radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h. |
CVE-2023-46570 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46569 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-5686 | High | 8.8 | 2023-10-20 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
CVE-2022-28073 | High | 7.5 | 2023-08-22 | A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. |
CVE-2022-28072 | High | 7.5 | 2023-08-22 | A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. |
CVE-2022-28071 | High | 7.5 | 2023-08-22 | A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. |
CVE-2022-28070 | High | 7.5 | 2023-08-22 | A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. |
CVE-2022-28069 | High | 7.5 | 2023-08-22 | A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. |
CVE-2022-28068 | High | 7.5 | 2023-08-22 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. |
CVE-2023-4322 | Critical | 9.8 | 2023-08-14 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. |
CVE-2021-32495 | Critical | 10.0 | 2023-07-07 | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to ca… |
CVE-2021-32494 | Critical | 10.0 | 2023-07-07 | Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial o… |
CVE-2023-1605 | High | 7.5 | 2023-03-23 | Denial of Service in GitHub repository radareorg/radare2 prior to 5.8.6. |
CVE-2023-27114 | Medium | 5.5 | 2023-03-10 | radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. |
CVE-2023-0302 | High | 7.8 | 2023-01-15 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository radareorg/radare2 prior to 5.8.2. |
CVE-2022-4843 | High | 7.5 | 2022-12-29 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2. |
CVE-2022-4398 | High | 7.8 | 2022-12-10 | Integer Overflow or Wraparound in GitHub repository radareorg/radare2 prior to 5.8.0. |
CVE-2020-27795 | High | 7.5 | 2022-08-19 | A segmentation fault was discovered in radare2 with adf command. In libr/core/cmd_anal.c, when command "adf" has no or wrong argument, anal_fcn_data (core, inp… |
CVE-2020-27794 | Critical | 9.1 | 2022-08-19 | A double free issue was discovered in radare2 in cmd_info.c:cmd_info(). Successful exploitation could lead to modification of unexpected memory locations and p… |
CVE-2020-27793 | High | 7.5 | 2022-08-19 | An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c. This could allow an attacker to cause a crash, and perform a de… |
CVE-2022-34520 | Medium | 5.5 | 2022-07-22 | Radare2 v5.7.2 was discovered to contain a NULL pointer dereference via the function r_bin_file_xtr_load_buffer at bin/bfile.c. This vulnerability allows attac… |
CVE-2022-34502 | Medium | 5.5 | 2022-07-22 | Radare2 v5.7.0 was discovered to contain a heap buffer overflow via the function consume_encoded_name_new at format/wasm/wasm.c. This vulnerability allows atta… |
CVE-2022-1899 | Critical | 9.1 | 2022-05-26 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. |
CVE-2021-44974 | Medium | 5.5 | 2022-05-25 | radareorg radare2 version 5.5.2 is vulnerable to NULL Pointer Dereference via libr/bin/p/bin_symbols.c binary symbol parser. |
CVE-2021-44975 | Medium | 5.5 | 2022-05-24 | radareorg radare2 5.5.2 is vulnerable to Buffer Overflow via /libr/core/anal_objc.c mach-o parser. |
CVE-2022-1809 | High | 7.8 | 2022-05-21 | Access of Uninitialized Pointer in GitHub repository radareorg/radare2 prior to 5.7.0. |
CVE-2022-1714 | High | 7.1 | 2022-05-13 | Out-of-bounds Read in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Typically… |
CVE-2022-1649 | Medium | 5.5 | 2022-05-10 | Null pointer dereference in libr/bin/format/mach0/mach0.c in radareorg/radare2 in GitHub repository radareorg/radare2 prior to 5.7.0. It is likely to be exploi… |
CVE-2022-1452 | High | 7.1 | 2022-04-24 | Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads da… |
CVE-2022-1451 | High | 7.1 | 2022-04-24 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data… |
CVE-2022-1444 | Medium | 5.5 | 2022-04-23 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.7.0. This vulnerability is capable of inducing denial of service. |
CVE-2022-1437 | High | 7.1 | 2022-04-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.7.0. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-1383 | Medium | 6.1 | 2022-04-18 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.8. The bug causes the program reads data past the end of the intented buffer. Ty… |
CVE-2022-1382 | Medium | 5.5 | 2022-04-18 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of making the radare2 crash, thus affecting the a… |
CVE-2022-1297 | Critical | 9.1 | 2022-04-11 | Out-of-bounds Read in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read s… |
CVE-2022-1296 | Critical | 9.1 | 2022-04-11 | Out-of-bounds read in `r_bin_ne_get_relocs` function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability may allow attackers to read sens… |
CVE-2022-1284 | Medium | 5.5 | 2022-04-08 | heap-use-after-free in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. |
CVE-2022-1283 | Medium | 5.5 | 2022-04-08 | NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cau… |
CVE-2022-1240 | High | 7.8 | 2022-04-06 | Heap buffer overflow in libr/bin/format/mach0/mach0.c in GitHub repository radareorg/radare2 prior to 5.8.6. If address sanitizer is disabled during the compil… |
CVE-2022-1238 | High | 7.8 | 2022-04-06 | Out-of-bounds Write in libr/bin/format/ne/ne.c in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitabl… |
CVE-2022-1237 | High | 7.8 | 2022-04-06 | Improper Validation of Array Index in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is heap overflow and may be exploitable. For more… |
CVE-2022-1244 | Medium | 5.5 | 2022-04-05 | heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service. |
CVE-2022-1207 | Medium | 6.6 | 2022-04-01 | Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the al… |
CVE-2022-1052 | Medium | 5.5 | 2022-03-24 | Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6. |
CVE-2022-1061 | High | 7.5 | 2022-03-24 | Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8. |
CVE-2022-1031 | High | 7.8 | 2022-03-22 | Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6. |
CVE-2022-0849 | Medium | 5.5 | 2022-03-05 | Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6. |
CVE-2021-4021 | High | 7.5 | 2022-02-24 | A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS a… |
CVE-2022-0695 | Medium | 5.5 | 2022-02-24 | Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0476 | Medium | 5.5 | 2022-02-23 | Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0713 | High | 7.1 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0712 | Medium | 5.5 | 2022-02-22 | NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0676 | High | 7.8 | 2022-02-22 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4. |
CVE-2022-0559 | Critical | 9.8 | 2022-02-16 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0523 | High | 7.8 | 2022-02-08 | Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0522 | High | 7.1 | 2022-02-08 | Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2. |
CVE-2022-0521 | High | 7.1 | 2022-02-08 | Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2. |
CVE-2022-0520 | High | 7.8 | 2022-02-08 | Use After Free in NPM radare2.js prior to 5.6.2. |
CVE-2022-0519 | High | 7.1 | 2022-02-08 | Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2. |