radare2 vulnerabilities

Products

• radare2 4

Latest radare2 CVEs

Newest publication first

1. CVE-2026-8696 radare2 6.1.5 Use-After-Free via gdbr_pids_list()

   Published 2026-05-15

   High·CVSS 8.7 EPSS 0.60%

   radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses. Attackers can trigg...

2. CVE-2026-8695 radare2 6.1.5 Use-After-Free via gdbr_threads_list()

   Published 2026-05-15

   High·CVSS 8.7 EPSS 0.63%

   radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability thr...

3. CVE-2021-32495 Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

   Published 2023-07-07

   Critical·CVSS 9.1 EPSS 0.77%

   Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function. Attacker can read freed memory afterwards. This will allow attackers to cause denial of service.

4. CVE-2021-32494 Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.

   Published 2023-07-07

   High·CVSS 7.5 EPSS 0.84%

   Radare2 has a division by zero vulnerability in Mach-O parser's rebase_buffer function. This allow attackers to create malicious inputs that can cause denial of service.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.