radareorg vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 202240
3. 20234
4. 20252
5. 202626

Newest CVEs

• CVE-2026-108387

  radare2: Remote code execution when loading Pebble/SMD binary

  radareorg · radare2

  High8.5
• CVE-2026-112077

  radareorg radare2 HTTP Sandbox Policy rtr_http.inc.c r_core_cmd_str_pipe protection mechanism

  radareorg · radare2

  Medium6.3
• CVE-2026-81883

  radare2: Out-of-bounds Read at the end of string in the LUA 5.3 bytecode

  radareorg · radare2

  Low3.3
• CVE-2026-81885

  radare2: Infinite relocation-chain loop causes denial of service in radare2 NE parser

  radareorg · radare2

  Medium5.5
• CVE-2026-81882

  radare2: Missing string termination causes heap out-of-bounds read in radare2 bplist parser

  radareorg · radare2

  Low3.3
• CVE-2026-81886

  radare2: Uncontrolled memory allocation in radare2 dmp64 parser

  radareorg · radare2

  Medium5.5
• CVE-2026-81884

  radare2: Heap out-of-bounds read in radare2 Mach-O LC_DATA_IN_CODE parser

  radareorg · radare2

  Low2.5
• CVE-2026-81880

  radare2: Uncontrolled resource consumption in radare2 PEF loader

  radareorg · radare2

  Medium5.5
• CVE-2026-81879

  radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling

  radareorg · radare2

  Medium5.5
• CVE-2026-81878

  radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

  radareorg · radare2

  Medium5.5