| CVE-2025-1864 | CRITICO9.8 | Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in radareorg radare2 allows Overflow Buffers.This issue affects radare2: before <5.9.9. | 03/03/2025 |
| CVE-2025-1744 | CRITICO9.8 | Out-of-bounds Write vulnerability in radareorg radare2 allows
heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9. | 28/02/2025 |
| CVE-2025-1378 | BASSO3.3 | A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be u | 17/02/2025 |
| CVE-2024-29646 | CRITICO9.8 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields. | 17/12/2024 |
| CVE-2024-11858 | ALTO7.8 | A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing | 15/12/2024 |
| CVE-2024-29645 | ALTO7.8 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function. | 02/12/2024 |
| CVE-2024-48241 | MEDIO5.5 | An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function. | 30/10/2024 |
| CVE-2024-26475 | MEDIO5.5 | An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function. | 14/03/2024 |
| CVE-2023-47016 | ALTO7.5 | radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h. | 22/11/2023 |
| CVE-2023-46570 | CRITICO9.8 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. | 28/10/2023 |
| CVE-2023-46569 | CRITICO9.8 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. | 28/10/2023 |
| CVE-2023-5686 | ALTO8.8 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | 20/10/2023 |
| CVE-2022-28073 | ALTO7.5 | A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28072 | ALTO7.5 | A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28071 | ALTO7.5 | A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28070 | ALTO7.5 | A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28069 | ALTO7.5 | A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28068 | ALTO7.5 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2023-4322 | CRITICO9.8 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | 14/08/2023 |
| CVE-2021-32495 | CRITICO9.1 | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
| 07/07/2023 |