Radare Radare2 vulnerabilities

CVE-2017-7946 [MEDIUM] CWE-416 CVE-2017-7946: The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers The get_relocs_64 function in libr/bin/format/mach0/mach0.c in radare2 1.3.0 allows remote attackers to cause a denial of service (use-after-free and application crash) via a crafted Mach0 file.

CVE-2025-60358 [MEDIUM] CWE-401 CVE-2025-60358: radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations. radare2 v.5.9.8 and before contains a memory leak in the function _load_relocations.

CVE-2017-16805 [MEDIUM] CWE-125 CVE-2017-16805: In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid rea In radare2 2.0.1, libr/bin/dwarf.c allows remote attackers to cause a denial of service (invalid read and application crash) via a crafted ELF file, related to r_bin_dwarf_parse_comp_unit in dwarf.c and sdb_set_internal in shlr/sdb/src/sdb.c.

CVE-2018-20461 [MEDIUM] CWE-125 CVE-2018-20461: In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denia In radare2 prior to 3.1.1, core_anal_bytes in libr/core/cmd_anal.c allows attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting a binary file.

CVE-2018-20458 [MEDIUM] CWE-125 CVE-2018-20458: In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow at In radare2 prior to 3.1.1, r_bin_dyldcache_extract in libr/bin/format/mach0/dyldcache.c may allow attackers to cause a denial-of-service (application crash caused by out-of-bounds read) by crafting an input file.

CVE-2022-1283 [MEDIUM] CWE-476 CVE-2022-1283: NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 NULL Pointer Dereference in r_bin_ne_get_entrypoints function in GitHub repository radareorg/radare2 prior to 5.6.8. This vulnerability allows attackers to cause a denial of service (application crash).

CVE-2025-1378 [LOW] CWE-119 CVE-2025-1378: A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. Upgrading to version 6.0.0 is ab

CVE-2026-81883 [LOW] CWE-125 CVE-2026-81883: radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radar radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the remaining buffer length. The vulnerability is triggered by

CVE-2026-81884 [LOW] CWE-125 CVE-2026-81884: radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radar radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O LC_DATA_IN_CODE parser was vulnerable because the Mach-O LC_DATA_IN_CODE parser trusted dataoff and datasize and allowed a final partial record to be processed. The vulnerability is triggered by opening a crafted Mach-O file while the non-def

CVE-2025-5648 [LOW] CWE-119 CVE-2025-5648: A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the f A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told

CVE-2025-5642 [LOW] CWE-119 CVE-2025-5642: A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exp

CVE-2025-5644 [LOW] CWE-119 CVE-2025-5644: A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by t A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complexity of an attack is rather high. The

CVE-2025-5645 [LOW] CWE-119 CVE-2025-5645: A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the f A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to

CVE-2025-5647 [LOW] CWE-119 CVE-2025-5647: A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the fun A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitatio

CVE-2025-5643 [LOW] CWE-119 CVE-2025-5643: A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation

CVE-2025-5646 [LOW] CWE-119 CVE-2025-5646: A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability af A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather hi

CVE-2025-5641 [LOW] CWE-119 CVE-2025-5641: A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The ex

CVE-2025-60361 [LOW] CWE-401 CVE-2025-60361: radare2 v5.9.8 and before contains a memory leak in the function bochs_open. radare2 v5.9.8 and before contains a memory leak in the function bochs_open.