Approved changes feed: RSS · Atom
cpe:2.3:a:radare2:radare2:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Radare2 (b61f8dc4-38db-5061-a209-58e6e72e2035) |
|---|---|
| Product | Radare2 (5ea3d1a8-9033-5e6c-a580-bee57b0227f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8696 |
vulnerable | 2026-06-08 08:08:58.548385 |
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
HIGH (7.5)
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses. Attackers can trigger the vulnerability by causing qsThreadInfo to fail after qfThreadInfo successfully allocates RDebugPid structures, resulting in double-free memory corruption when the error path attempts to clean up the list.
Published: 2026-05-15T20:52:32.575Z
Updated: 2026-07-14T22:04:01.053Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-8695 |
vulnerable | 2026-06-08 08:08:58.546755 |
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
HIGH (7.5)
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability through GDB remote debugging to cause a denial of service or potentially achieve code execution by manipulating thread list processing.
Published: 2026-05-15T17:01:36.852Z
Updated: 2026-07-14T22:04:00.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32495 |
vulnerable | 2026-06-08 05:32:07.368970 |
Details available
CRITICAL (10)
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.
Published: 2023-07-07T18:27:29.097Z
Updated: 2024-11-12T19:46:27.537Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-32494 |
vulnerable | 2026-06-08 05:32:07.367592 |
Details available
CRITICAL (10)
Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.
Published: 2023-07-07T18:20:40.510Z
Updated: 2024-11-12T19:47:21.001Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.