Known vulnerabilities in radare2 2

Vendor: Radare
Software: radare2
Version: 2
Software CPE: cpe:2.3:a:radare:radare2:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting radare2 version 2 radare2 2 is affected by 23 vulnerabilities: 7 high, 10 medium, 6 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU147217 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-78 High
No
No
6.2.2 07.09.2026 SB2026090722
#VU142714 - Out-of-bounds read
CWE-125 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142713 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142712 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142711 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU142709 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU142708 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU142707 - Excessive Iteration
CWE-834 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142706 - Integer overflow
CWE-190 Medium
No
No
6.2.0 15.08.2026 SB2026081545
#VU142705 - Out-of-bounds read
CWE-125 Low
No
No
6.2.0 15.08.2026 SB2026081545
#VU101388 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-11858
CWE-78 Medium
No
No
- 10.12.2024 SB2024121051
SB2024121055
SB2024121056
and 1 more
#VU79763 - Double Free
CVE-2020-27794
CWE-415 High
No
No
4.4.0 21.08.2023 SB2022081922
#VU79762 - Use of Uninitialized Resource
CVE-2020-27795
CWE-908 Low
No
No
4.4.0 21.08.2023 SB2022081922
#VU79761 - Off-by-one Error
CVE-2020-27793
CWE-193 Low
No
No
4.4.0 21.08.2023 SB2022081922
#VU79760 - Integer overflow
CVE-2022-4398
CWE-190 High
No
No
5.8.0 21.08.2023 SB2023082114
#VU79759 - Heap-based Buffer Overflow
CVE-2023-4322
CWE-122 High
No
No
- 21.08.2023 SB2023082117
SB2023111071
SB2023111072
and 3 more
#VU61685 - Use After Free
CVE-2022-1031
CWE-416 Medium
No
No
5.6.6 29.03.2022 SB2022032509
#VU61626 - Heap-based Buffer Overflow
CVE-2022-1061
CWE-122 High
No
No
5.6.8 25.03.2022 SB2022032510
#VU61625 - Heap-based Buffer Overflow
CVE-2022-1052
CWE-122 High
No
No
5.6.6 25.03.2022 SB2022032509
SB2024041624
#VU60881 - Resource exhaustion
CVE-2022-0476
CWE-400 Medium
No
No
5.6.4 25.02.2022 SB2022022417


Showing elements 1 - 20 out of 23