RA
Product
radare2
180
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 72Medium 80Low 12
Watch
Add radare2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-10186 | 5.5 | Apr 17 | In radare2 2.5.0, there is a heap-based buffer over-read in the r_hex_bin2str function (libr/util/hex.c) Affected: 2.5.0 |
| CVE-2018-8810 | 5.5 | Mar 20 | In radare2 2.4.0, there is a heap-based buffer over-read in the get_ivar_list_t function of mach0_classes.c Affected: 2.4.0 |
| CVE-2018-8809 | 5.5 | Mar 20 | In radare2 2.4.0, there is a heap-based buffer over-read in the dalvik_op function of anal_dalvik.c Affected: 2.4.0 |
| CVE-2018-8808 | 5.5 | Mar 20 | In radare2 2.4.0, there is a heap-based buffer over-read in the r_asm_disassemble function of asm.c Affected: 2.4.0 |
| CVE-2017-16805 | 5.5 | Nov 13 | In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to… Affected: 2.0.1 |
| CVE-2017-16359 | 5.5 | Nov 1 | In radare 2.0.1, a pointer wraparound vulnerability exists in store_versioninfo_gnu_verdef() in libr/bin/format/elf/elf.c Affected: 2.0.1 |
| CVE-2017-9762 | 5.5 | Jun 19 | The cmd_info function in libr/core/cmd_info.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted binary… Affected: 1.5.0 |
| CVE-2017-9761 | 5.5 | Jun 19 | The find_eoq function in libr/core/cmd.c in radare2 1.5.0 allows remote attackers to cause a denial of service (heap-based out-of-bounds read and application crash) via a crafted… Affected: 1.5.0 |
| CVE-2017-9520 | 5.5 | Jun 8 | The r_config_set function in libr/config/config.c in radare2 1.5.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted DEX… Affected: 1.5.0 |
| CVE-2017-7946 | 5.5 | Apr 18 | The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a… Affected: 1.3.0 |
| CVE-2017-7854 | 5.5 | Apr 13 | The consume_init_expr function in wasm.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted… Affected: 1.3.0 |
| CVE-2017-7716 | 5.5 | Apr 12 | The read_u32_leb128 function in libr/util/uleb128.c in radare2 1.3.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a… Affected: 1.3.0 |
| CVE-2017-7274 | 5.5 | Mar 27 | The r_pkcs7_parse_cms function in libr/util/r_pkcs7.c in radare2 1.3.0 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… Affected: 1.3.0 |
| CVE-2017-6415 | 5.5 | Mar 2 | The dex_parse_debug_item function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash)… Affected: 1.2.1 |
| CVE-2017-6387 | 5.5 | Mar 2 | The dex_loadcode function in libr/bin/p/bin_dex.c in radare2 1.2.1 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted… Affected: 1.2.1 |
| CVE-2017-6197 | 5.5 | Feb 24 | The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a… Affected: 1.2.1 |
| CVE-2026-81881 | 4.4 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser Affected: before 6.2.0 |
| CVE-2025-63744 | 4.3 | Nov 14 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c Affected: through 6.0.5 |
| CVE-2026-81883 | 3.3 | Sep 22 | radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode Affected: before 6.2.0 |
| CVE-2026-81884 | 3.3 | Sep 22 | radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser Affected: before 6.2.0 |
| CVE-2025-60361 | 3.3 | Oct 17 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open Affected: through 5.9.8 |
| CVE-2025-1378 | 3.3 | Feb 17 | radare2 rasm2 rasm2.c memory corruption Affected: 5.9.9 |
| CVE-2025-5648 | 2.5 | Jun 5 | Radare2 radiff2 pal.c r_cons_pal_init memory corruption Affected: 5.9.9 |
| CVE-2025-5647 | 2.5 | Jun 5 | Radare2 radiff2 cons.c r_cons_context_break_pop memory corruption Affected: 5.9.9 |
| CVE-2025-5646 | 2.5 | Jun 5 | Radare2 radiff2 pal.c r_cons_rainbow_free memory corruption Affected: 5.9.9 |
| CVE-2025-5645 | 2.5 | Jun 5 | Radare2 radiff2 pal.c r_cons_pal_init memory corruption Affected: 5.9.9 |
| CVE-2025-5644 | 2.5 | Jun 5 | Radare2 radiff2 cons.c r_cons_flush use after free Affected: 5.9.9 |
| CVE-2025-5643 | 2.5 | Jun 5 | Radare2 radiff2 cons.c cons_stack_load memory corruption Affected: 5.9.9 |
| CVE-2025-5642 | 2.5 | Jun 5 | Radare2 radiff2 pal.c r_cons_pal_init memory corruption Affected: 5.9.9 |
| CVE-2025-5641 | 2.5 | Jun 5 | Radare2 radiff2 cons.c r_cons_is_breaked memory corruption Affected: 5.9.9 |