← Back

Radare2

radare2

Vendor: Radare • 179 CVEs

CVEs (179)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Radare
1Radare2
Jun 17, 2026
Feb 28, 2025
10.0 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Out-of-bounds Write vulnerability in radareorg radare2 allows heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.
1Radare
1Radare2
Jun 17, 2026
Feb 17, 2025
4.8 MEDIUM· v4
3.3 LOW· v3
1.7 LOW· v2
A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruptio...Show more
A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0.0 is able to address this issue. The patch is identified as c6c772d2eab692ce7ada5a4227afd50c355ad545. It is recommended to upgrade the affected component.Show less
1Radare
1Radare2
Jun 17, 2026
Dec 17, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.
1Radare
1Radare2
Jun 17, 2026
Dec 15, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during co...Show more
A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing​Show less
1Radare
1Radare2
Jun 17, 2026
Dec 2, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function.
1Radare
1Radare2
Jun 17, 2026
Oct 30, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function.
1Radare
1Radare2
Jun 17, 2026
Mar 14, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function.
1Radare
1Radare2
Jun 17, 2026
Nov 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h.
1Radare
1Radare2
Jun 17, 2026
Oct 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.
1Radare
1Radare2
Jun 17, 2026
Oct 28, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Oct 20, 2023
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0.
1Radare
1Radare2
Jun 17, 2026
Aug 22, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Aug 14, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0.
1Radare
1Radare2
Jun 17, 2026
Jul 7, 2023
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
1Radare
1Radare2
Jun 17, 2026
Jul 7, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.