CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 23/04/2026 |
| CVE-2026-40517 | HOCH7.8 | radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name inter | 22/04/2026 |
| CVE-2026-40527 | HOCH7.8 | radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute when radare2 analyz | 17/04/2026 |
| CVE-2026-40499 | HOCH7.8 | radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted section names to injec | 15/04/2026 |
| CVE-2025-63745 | MITTEL5.5 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data. | 14/11/2025 |
| CVE-2025-63744 | MITTEL4.3 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program. | 14/11/2025 |
| CVE-2025-60361 | NIEDRIG3.3 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open. | 17/10/2025 |
| CVE-2025-60360 | MITTEL5.5 | radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init. | 17/10/2025 |
| CVE-2025-60359 | MITTEL5.5 | radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new. | 17/10/2025 |
| CVE-2025-60358 | MITTEL5.5 | radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations. | 16/10/2025 |
| CVE-2025-5648 | NIEDRIG2.5 | A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rat | 05/06/2025 |
| CVE-2025-5647 | NIEDRIG2.5 | A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The complexity of an at | 05/06/2025 |
| CVE-2025-5646 | NIEDRIG2.5 | A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The | 05/06/2025 |
| CVE-2025-5645 | NIEDRIG2.5 | A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of an attack is rather | 05/06/2025 |
| CVE-2025-5644 | NIEDRIG2.5 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complex | 05/06/2025 |
| CVE-2025-5643 | NIEDRIG2.5 | A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an att | 05/06/2025 |
| CVE-2025-5642 | NIEDRIG2.5 | A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitabi | 05/06/2025 |
| CVE-2025-5641 | NIEDRIG2.5 | A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity | 05/06/2025 |