← Back

Radare2

radare2

Vendor: Radare • 170 CVEs

CVEs (170)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Radare
1Radare2
Jun 17, 2026
Apr 5, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
heap-buffer-overflow in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability is capable of inducing denial of service.
1Radare
1Radare2
Jun 17, 2026
Apr 1, 2022
N/A· v4
6.6 MEDIUM· v3
4.3 MEDIUM· v2
Out-of-bounds read in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to read sensitive information from outside the allocated buffer boundary.
1Radare
1Radare2
Jun 17, 2026
Mar 24, 2022
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
Heap Buffer Overflow in iterate_chained_fixups in GitHub repository radareorg/radare2 prior to 5.6.6.
1Radare
1Radare2
Jun 17, 2026
Mar 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8.
1Radare
1Radare2
Jun 17, 2026
Mar 22, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use After Free in op_is_set_bp in GitHub repository radareorg/radare2 prior to 5.6.6.
1Radare
1Radare2
Jun 17, 2026
Mar 5, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Use After Free in r_reg_get_name_idx in GitHub repository radareorg/radare2 prior to 5.6.6.
1Radare
1Radare2
Jun 17, 2026
Feb 24, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and...Show more
A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2. Mapping a huge section filled with zeros of an ELF64 binary for MIPS architecture can lead to uncontrolled resource consumption and DoS.Show less
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 24, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 23, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Denial of Service in GitHub repository radareorg/radare2 prior to 5.6.4.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 22, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 22, 2022
N/A· v4
5.5 MEDIUM· v3
7.1 HIGH· v2
NULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.6.4.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 22, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.4.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 16, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.2.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Access of Memory Location Before Start of Buffer in NPM radare2.js prior to 5.6.2.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Access of Memory Location After End of Buffer in GitHub repository radareorg/radare2 prior to 5.6.2.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
Use After Free in NPM radare2.js prior to 5.6.2.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Buffer Access with Incorrect Length Value in GitHub repository radareorg/radare2 prior to 5.6.2.
2Fedoraproject
Radare
2Fedora
Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
7.1 HIGH· v3
5.8 MEDIUM· v2
Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.6.2.
1Radare
1Radare2
Jun 17, 2026
Feb 8, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Use After Free in GitHub repository radareorg/radare2 prior to 5.6.0.