CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2024-29646 | 심각9.8 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields. | 17/12/2024 |
| CVE-2024-11858 | 높음7.8 | A flaw was found in Radare2, which contains a command injection vulnerability caused by insufficient input validation when handling Pebble Application files. Maliciously crafted inputs can inject shell commands during command parsing, leading to unintended behavior during file processing | 15/12/2024 |
| CVE-2024-29645 | 높음7.8 | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the parse_die function. | 02/12/2024 |
| CVE-2024-48241 | 보통5.5 | An issue in radare2 v5.8.0 through v5.9.4 allows a local attacker to cause a denial of service via the __bf_div function. | 30/10/2024 |
| CVE-2024-26475 | 보통5.5 | An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grub_sfs_read_extent function. | 14/03/2024 |
| CVE-2023-47016 | 높음7.5 | radare2 5.8.9 has an out-of-bounds read in r_bin_object_set_items in libr/bin/bobj.c, causing a crash in r_read_le32 in libr/include/r_endian.h. | 22/11/2023 |
| CVE-2023-46570 | 심각9.8 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. | 28/10/2023 |
| CVE-2023-46569 | 심각9.8 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. | 28/10/2023 |
| CVE-2023-5686 | 높음8.8 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | 20/10/2023 |
| CVE-2022-28073 | 높음7.5 | A use after free in r_reg_set_value function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28072 | 높음7.5 | A heap buffer overflow in r_read_le32 function in radare25.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28071 | 높음7.5 | A use after free in r_reg_get_name_idx function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28070 | 높음7.5 | A null pointer deference in __core_anal_fcn function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28069 | 높음7.5 | A heap buffer overflow in vax_opfunction in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2022-28068 | 높음7.5 | A heap buffer overflow in r_sleb128 function in radare2 5.4.2 and 5.4.0. | 22/08/2023 |
| CVE-2023-4322 | 심각9.8 | Heap-based Buffer Overflow in GitHub repository radareorg/radare2 prior to 5.9.0. | 14/08/2023 |
| CVE-2021-32495 | 심각9.1 | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
| 07/07/2023 |