| CVE-2026-6942 | ALTO8.8 | radare2-mcp version 1.6.0 and earlier contains an os command injection vulnerability that allows remote attackers to execute arbitrary commands by bypassing the command filter through shell metacharacters in user-controlled input passed to r2_cmd_str(). Attackers can inject shell metacharacters through the jsonrpc inte | 23/04/2026 |
| CVE-2026-6941 | ALTO7.8 | radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt th | 23/04/2026 |
| CVE-2026-6940 | ALTO7.1 | radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files outside the project st | 23/04/2026 |
| CVE-2026-40517 | ALTO7.8 | radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name inter | 22/04/2026 |
| CVE-2026-40527 | ALTO7.8 | radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute when radare2 analyz | 17/04/2026 |
| CVE-2026-40499 | ALTO7.8 | radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted section names to injec | 15/04/2026 |
| CVE-2025-63745 | MEDIO5.5 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data. | 14/11/2025 |
| CVE-2025-63744 | MEDIO4.3 | A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program. | 14/11/2025 |
| CVE-2025-60361 | BAJO3.3 | radare2 v5.9.8 and before contains a memory leak in the function bochs_open. | 17/10/2025 |
| CVE-2025-60360 | MEDIO5.5 | radare2 v5.9.8 and before contains a memory leak in the function r2r_subprocess_init. | 17/10/2025 |
| CVE-2025-60359 | MEDIO5.5 | radare2 v5.9.8 and before contains a memory leak in the function r_bin_object_new. | 17/10/2025 |
| CVE-2025-60358 | MEDIO5.5 | radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations. | 16/10/2025 |
| CVE-2025-5648 | BAJO2.5 | A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rat | 05/06/2025 |
| CVE-2025-5647 | BAJO2.5 | A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The complexity of an at | 05/06/2025 |
| CVE-2025-5646 | BAJO2.5 | A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The | 05/06/2025 |
| CVE-2025-5645 | BAJO2.5 | A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of an attack is rather | 05/06/2025 |
| CVE-2025-5644 | BAJO2.5 | A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complex | 05/06/2025 |
| CVE-2025-5643 | BAJO2.5 | A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an att | 05/06/2025 |
| CVE-2025-5642 | BAJO2.5 | A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitabi | 05/06/2025 |
| CVE-2025-5641 | BAJO2.5 | A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity | 05/06/2025 |