High severity · published Jul 6, 2026
CVE-2026-14788
radareorg radare2 cfile.c r_core_bin_load use after free
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/core/cfile.c. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The name of the patch is 635ab1eeb30340c26076722a90cb91fb2272130b. Applying a patch is advised to resolve this issue.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RA
radare2 · radareorg
6.1.0; 6.1.1; 6.1.2; 6.1.3; 6.1.4; 6.1.5; +1 more · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-14788
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-14788
Patch
https://github.com/oldzhu/radare2/commit/635ab1eeb30340c26076722a90cb91fb2272130b
Product
https://github.com/radareorg/radare2/
Exploit
https://github.com/radareorg/radare2/issues/26049
Third Party Advisory
https://vuldb.com/cve/CVE-2026-14788
Third Party Advisory
https://vuldb.com/submit/850388
Third Party Advisory
https://vuldb.com/vuln/376377
More from radare2
9.8
CVE-2025-1864
Buffer Overflow and Potential Code Execution in Radare2
9.8
CVE-2025-1744
Out-of-bounds Write in radare2
7.8
CVE-2026-14789
radareorg radare2 Memory64ListStream mdmp.c stack-based overflow
7.8
CVE-2026-14787
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
7.8
CVE-2026-14760
radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free