RA
Product
radare2
180
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 72Medium 80Low 12
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-32494 | 7.5 | Jul 7 | Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function Affected: 5.3.0 |
| CVE-2023-1605 | 7.5 | Mar 23 | Denial of Service in radareorg/radare2 Affected: before 5.8.6 |
| CVE-2022-4843 | 7.5 | Dec 29 | NULL Pointer Dereference in radareorg/radare2 Affected: before 5.8.2 |
| CVE-2020-27793 | 7.5 | Aug 19 | An off-by-one overflow flaw was found in radare2 due to mismatched array length in core_java.c Affected: before 4.4.0 |
| CVE-2020-27795 | 7.5 | Aug 19 | A segmentation fault was discovered in radare2 with adf command Affected: before 4.4.0 |
| CVE-2022-1061 | 7.5 | Mar 24 | Heap Buffer Overflow in parseDragons in radareorg/radare2 Affected: before 5.6.8 |
| CVE-2021-4021 | 7.5 | Feb 24 | A vulnerability was found in Radare2 in versions prior to 5.6.2, 5.6.0, 5.5.4 and 5.5.2 Affected: through 5.5.0 |
| CVE-2021-3673 | 7.5 | Aug 2 | A vulnerability was found in Radare2 in version 5.3.1 Affected: 5.3.1 |
| CVE-2020-17487 | 7.5 | Aug 11 | radare2 4.5.0 misparses signature information in PE files, causing a segmentation fault in r_x509_parse_algorithmidentifier in libr/util/x509.c Affected: 4.5.0 |
| CVE-2019-12829 | 7.5 | Jun 15 | radare2 through 3.5.1 mishandles the RParse API, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact, as… Affected: through 3.5.1 |
| CVE-2017-9763 | 7.5 | Jun 19 | The grub_ext2_read_block function in fs/ext2.c in GNU GRUB before 2013-11-12, as used in shlr/grub/fs/ext2.c in radare2 1.5.0, allows remote attackers to cause a denial of service… Affected: 1.5.0 |
| CVE-2026-41015 | 7.4 | Apr 16 | radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP Affected: 01ca2f61fa43bd3f4b732447de31b16039d820c0 before 9236f44a28812fe911814e1b3a7bcf1e4de5d3c2 |
| CVE-2026-6940 | 7.1 | Apr 23 | radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion Affected: before 6.1.4 |
| CVE-2022-1714 | 7.1 | May 13 | Out-of-bounds Read in radareorg/radare2 Affected: before 5.7.0 |
| CVE-2022-1451 | 7.1 | Apr 24 | Out-of-bounds Read in r_bin_java_constant_value_attr_new function in radareorg/radare2 Affected: before 5.7.0 |
| CVE-2022-1452 | 7.1 | Apr 24 | Out-of-bounds Read in r_bin_java_bootstrap_methods_attr_new function in radareorg/radare2 Affected: before 5.7.0 |
| CVE-2022-1437 | 7.1 | Apr 22 | Heap-based Buffer Overflow in radareorg/radare2 Affected: before 5.7.0 |
| CVE-2022-0713 | 7.1 | Feb 22 | Heap-based Buffer Overflow in radareorg/radare2 Affected: before 5.6.4 |
| CVE-2022-0522 | 7.1 | Feb 8 | Access of Memory Location Before Start of Buffer in radareorg/radare2 Affected: before 5.6.2 |
| CVE-2022-0521 | 7.1 | Feb 8 | Access of Memory Location After End of Buffer in radareorg/radare2 Affected: before 5.6.2 |
| CVE-2022-0519 | 7.1 | Feb 8 | Buffer Access with Incorrect Length Value in radareorg/radare2 Affected: before 5.6.2 |
| CVE-2022-0518 | 7.1 | Feb 8 | Heap-based Buffer Overflow in radareorg/radare2 Affected: before 5.6.2 |