Known vulnerabilities in radare2

Vendor: Radare
Software: radare2
Software CPE: cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*
Total vulnerabilities: 92
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting radare2 radare2 is affected by 92 known vulnerabilities: 22 high, 54 medium, 16 low Critical High Medium Low

Vulnerabilities (92)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147217 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 High
No
No
6.2.2 07.09.2026 SB2026090722
#VU142714 - Out-of-bounds read
CWE-125 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142713 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142712 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142711 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU142709 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU142708 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU142707 - Excessive Iteration
CWE-834 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142706 - Integer overflow
CWE-190 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142705 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU117684 - Missing release of memory after effective lifetime
CVE-2025-60358
CWE-401 Low
No
No
6.0.0 27.10.2025 SB2025102752
SB2025102755
#VU101388 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11858
CWE-78 Medium
No
No
- 10.12.2024 SB2024121051
SB2024121055
SB2024121056
and 1 more
#VU99572 - Integer overflow
CVE-2024-48241
CWE-190 Low
No
No
5.9.6 01.11.2024 SB2024110102
SB2024110105
SB2024110106
and 5 more
#VU82986 - Heap-based Buffer Overflow
CVE-2023-5686
CWE-122 High
No
No
- 10.11.2023 SB2023111060
SB2023111071
SB2023111072
and 3 more
#VU79760 - Integer overflow
CVE-2022-4398
CWE-190 High
No
No
5.8.0 21.08.2023 SB2023082114
#VU79759 - Heap-based Buffer Overflow
CVE-2023-4322
CWE-122 High
No
No
- 21.08.2023 SB2023082117
SB2023111071
SB2023111072
and 3 more
#VU79758 - Divide By Zero
CVE-2021-32494
CWE-369 Low
No
No
5.3.0 21.08.2023 SB2023082113
#VU79757 - Use After Free
CVE-2021-32495
CWE-416 High
No
No
5.3.0 21.08.2023 SB2023082113
#VU79756 - Resource exhaustion
CVE-2023-1605
CWE-400 Medium
No
No
5.8.6 21.08.2023 SB2023082116
#VU79754 - NULL Pointer Dereference
CVE-2023-27114
CWE-476 Medium
No
No
5.8.4 21.08.2023 SB2023082115


Showing elements 1 - 20 out of 92