{"kind": "product", "path": "vulns/ubuntu-25.10/radare2", "name": "radare2", "product": "radare2", "ecosystem": "Ubuntu:25.10", "items": [{"id": "CVE-2026-14789", "noindex": false, "published": "2026-07-06T02:00:10.294Z", "modified": "2026-07-06T12:59:10.100Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00222, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14789", "title": "radareorg radare2 Memory64ListStream mdmp.c stack-based overflow", "description": "A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of the file libr/bin/format/mdmp/mdmp.c of the component Memory64ListStream Parser. Performing a manipulation results in stack-based buffer overflow. The attack requires a local approach. The exploit is now public and may be used. The patch is named 175d4addb68981331c85b10681c2161c38fb5762. It is suggested to install a patch to address this issue.", "references": ["https://vuldb.com/vuln/376378", "https://vuldb.com/vuln/376378/cti", "https://vuldb.com/cve/CVE-2026-14789"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14788", "noindex": false, "published": "2026-07-06T01:45:08.467Z", "modified": "2026-07-06T13:05:50.219Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00199, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14788", "title": "radareorg radare2 cfile.c r_core_bin_load use after free", "description": "A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/core/cfile.c. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The name of the patch is 635ab1eeb30340c26076722a90cb91fb2272130b. Applying a patch is advised to resolve this issue.", "references": ["https://vuldb.com/vuln/376377", "https://vuldb.com/vuln/376377/cti", "https://vuldb.com/cve/CVE-2026-14788"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14787", "noindex": false, "published": "2026-07-06T01:30:09.280Z", "modified": "2026-07-06T16:49:15.165Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00205, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14787", "title": "radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow", "description": "A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: 2b6265476c75567006b0fcbb749f4ae7b189c5df. It is recommended to apply a patch to fix this issue.", "references": ["https://vuldb.com/vuln/376376", "https://vuldb.com/vuln/376376/cti", "https://vuldb.com/cve/CVE-2026-14787"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14786", "noindex": false, "published": "2026-07-06T01:00:10.542Z", "modified": "2026-07-07T02:55:39.743Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00189, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14786", "title": "radareorg radare2 str.c r_str_word_get0set integer overflow", "description": "A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of the file libr/util/str.c. The manipulation results in integer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 11ac224c0eb8d57830fccc99e1c1cd8e5d958813. It is best practice to apply a patch to resolve this issue.", "references": ["https://vuldb.com/vuln/376375", "https://vuldb.com/vuln/376375/cti", "https://vuldb.com/cve/CVE-2026-14786"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14761", "noindex": false, "published": "2026-07-05T15:45:08.421Z", "modified": "2026-07-06T18:46:20.994Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00189, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14761", "title": "radareorg radare2 str.c r_str_append integer overflow", "description": "A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.", "references": ["https://vuldb.com/vuln/376350", "https://vuldb.com/vuln/376350/cti", "https://vuldb.com/cve/CVE-2026-14761"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14760", "noindex": false, "published": "2026-07-05T15:30:08.954Z", "modified": "2026-07-06T15:40:58.650Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00199, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14760", "title": "radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free", "description": "A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8b25c773785d85cb0103410a0905089d286921c2. It is advisable to implement a patch to correct this issue.", "references": ["https://vuldb.com/vuln/376349", "https://vuldb.com/vuln/376349/cti", "https://vuldb.com/cve/CVE-2026-14760"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14759", "noindex": false, "published": "2026-07-05T15:15:08.985Z", "modified": "2026-07-06T13:20:53.970Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00222, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14759", "title": "radareorg radare2 RBinJava Line Number Table class.c r_bin_java_inner_classes_attr_calc_size heap-based overflow", "description": "A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The patch is named cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87. To fix this issue, it is recommended to deploy a patch.", "references": ["https://vuldb.com/vuln/376348", "https://vuldb.com/vuln/376348/cti", "https://vuldb.com/cve/CVE-2026-14759"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14758", "noindex": false, "published": "2026-07-05T15:00:09.747Z", "modified": "2026-07-06T13:08:17.966Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00189, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14758", "title": "radareorg radare2 hexpairs cmd_anal.inc.c cmd_anal_opcode integer overflow", "description": "A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The name of the patch is 84e773986e7e5bb30453a9384f498ec0ccc9d0a9. A patch should be applied to remediate this issue.", "references": ["https://vuldb.com/vuln/376347", "https://vuldb.com/vuln/376347/cti", "https://vuldb.com/cve/CVE-2026-14758"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-14757", "noindex": false, "published": "2026-07-05T14:45:07.662Z", "modified": "2026-07-06T16:49:53.452Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00208, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-14757", "title": "radareorg radare2 cmd_anal.inc core_anal_bytes integer overflow", "description": "A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue.", "references": ["https://vuldb.com/vuln/376346", "https://vuldb.com/vuln/376346/cti", "https://vuldb.com/cve/CVE-2026-14757"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-8696", "noindex": false, "published": "2026-05-15T20:52:32.575Z", "modified": "2026-07-14T22:04:01.053Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00603, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-8696", "title": "radare2 6.1.5 Use-After-Free via gdbr_pids_list()", "description": "radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses. Attackers can trigger the vulnerability by causing qsThreadInfo to fail after qfThreadInfo successfully allocates RDebugPid structures, resulting in double-free memory corruption when the error path attempts to clean up the list.", "references": ["https://github.com/radareorg/radare2/issues/25836", "https://github.com/radareorg/radare2/commit/c213ad6894a1eb9086ac8bf5fae35757e9e1683c", "https://www.vulncheck.com/advisories/radare2-use-after-free-via-gdbr-pids-list"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-8695", "noindex": false, "published": "2026-05-15T17:01:36.852Z", "modified": "2026-07-14T22:04:00.386Z", "cvss": 8.7, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00626, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-8695", "title": "radare2 6.1.5 Use-After-Free via gdbr_threads_list()", "description": "radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability through GDB remote debugging to cause a denial of service or potentially achieve code execution by manipulating thread list processing.", "references": ["https://github.com/radareorg/radare2/issues/25835", "https://github.com/radareorg/radare2/commit/c213ad6894a1eb9086ac8bf5fae35757e9e1683c", "https://www.vulncheck.com/advisories/radare2-use-after-free-via-gdbr-threads-list"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-6941", "noindex": false, "published": "2026-04-23T20:39:48.613Z", "modified": "2026-07-14T22:03:54.309Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00225, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6941", "title": "radare2 < 6.1.4 Project Notes Path Traversal via Symlink", "description": "radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt that bypasses directory confinement checks, allowing note operations to follow the symlink and access arbitrary files outside the dir.projects root directory.", "references": ["https://github.com/radareorg/radare2/pull/25831", "https://github.com/radareorg/radare2/commit/4bcdee725ff0754ed721a98789c0af371c5f32a4", "https://www.vulncheck.com/advisories/radare2-project-notes-path-traversal-via-symlink"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-6940", "noindex": false, "published": "2026-04-23T20:26:36.837Z", "modified": "2026-07-14T22:03:53.636Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00218, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-6940", "title": "radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion", "description": "radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files outside the project storage boundary to cause recursive deletion of attacker-chosen directories with permissions of the radare2 process, resulting in integrity and availability loss.", "references": ["https://github.com/radareorg/radare2/pull/25830", "https://github.com/radareorg/radare2/pull/25830/commits", "https://www.vulncheck.com/advisories/radare2-project-deletion-path-traversal-directory-deletion"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-40517", "noindex": false, "published": "2026-04-22T21:44:12.543Z", "modified": "2026-07-14T20:00:31.360Z", "cvss": 8.4, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.01051, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-40517", "title": "radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names", "description": "radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2's shell execution operator.", "references": ["https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero", "https://github.com/radareorg/radare2/issues/25730", "https://github.com/radareorg/radare2/pull/25731"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-40527", "noindex": false, "published": "2026-04-17T20:25:20.143Z", "modified": "2026-07-14T20:00:37.912Z", "cvss": 8.5, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00915, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-40527", "title": "radare2 Command Injection via DWARF Parameter Names", "description": "radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute when radare2 analyzes the binary with aaa and subsequently runs afsvj, allowing arbitrary shell command execution through the unsanitized parameter interpolation in the pfq command string.", "references": ["https://github.com/radareorg/radare2/pull/25821", "https://github.com/radareorg/radare2/commit/bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683", "https://www.vulncheck.com/advisories/radare2-command-injection-via-dwarf-parameter-names"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-41015", "noindex": false, "published": "2026-04-16T02:35:47.196Z", "modified": "2026-04-16T13:15:26.207Z", "cvss": 7.4, "cvss_vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "severity": "high", "epss": 0.01156, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-41015", "title": "CVE-2026-41015", "description": "radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3.", "references": ["https://github.com/radareorg/radare2/issues/25650", "https://github.com/radareorg/radare2/pull/25651", "https://github.com/radareorg/radare2/blob/9236f44a28812fe911814e1b3a7bcf1e4de5d3c2/SECURITY.md?plain=1#L3-L5"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-40499", "noindex": false, "published": "2026-04-15T02:05:20.899Z", "modified": "2026-07-14T20:00:24.764Z", "cvss": 8.4, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.01184, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-40499", "title": "radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()", "description": "radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted section names to inject r2 commands that are executed when the idp command processes the file.", "references": ["https://github.com/radareorg/radare2/issues/25752", "https://github.com/radareorg/radare2/commit/5590c87deeb7eb2a106fd7aab9ca88bfeebb7397", "https://github.com/radareorg/radare2/releases/tag/6.1.4"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2026-4174", "noindex": false, "published": "2026-03-15T10:32:10.553Z", "modified": "2026-03-17T15:14:43.360Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00117, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-4174", "title": "Radare2 Mach-O File mach0.c walk_exports_trie resource consumption", "description": "A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. Upgrading to version 6.1.2 is capable of addressing this issue. The name of the patch is 4371ae84c99c46b48cb21badbbef06b30757aba0. You should upgrade the affected component. The code maintainer states that, \"[he] wont consider this bug ", "references": ["https://vuldb.com/?id.351081", "https://vuldb.com/?ctiid.351081", "https://vuldb.com/?submit.769799"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-63745", "noindex": false, "published": "2025-11-14T00:00:00.000Z", "modified": "2025-11-14T21:31:01.937Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "severity": "medium", "epss": 0.00161, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-63745", "title": "CVE-2025-63745", "description": "A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the info() function of bin_ne.c. A crafted binary input can trigger a segmentation fault, leading to a denial of service when the tool processes malformed data.", "references": ["https://github.com/marlinkcyber/advisories/blob/main/advisories/radare2-nullptr-deref-bin_ne.md", "https://github.com/radareorg/radare2/issues/24660", "https://github.com/radareorg/radare2/commit/6c5df3f8570d4f0c360681c08241ad8af3b919fd"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}, {"id": "CVE-2025-63744", "noindex": false, "published": "2025-11-14T00:00:00.000Z", "modified": "2025-11-16T21:02:45.591Z", "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "severity": "medium", "epss": 0.00311, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2025-63744", "title": "CVE-2025-63744", "description": "A NULL pointer dereference vulnerability was discovered in radare2 6.0.5 and earlier within the load() function of bin_dyldcache.c. Processing a crafted file can cause a segmentation fault and crash the program.", "references": ["https://github.com/marlinkcyber/advisories/blob/main/advisories/radare2-nullptr-deref-bin_dyldcache.md", "https://github.com/radareorg/radare2/issues/24661", "https://github.com/radareorg/radare2/commit/e37e15d10fd8a19c3e57b3d7735a2cfe0082ec79"], "fixes": [], "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}]}], "total": 130, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 7, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "radare2", "path": "vulns/ubuntu-25.10/radare2", "ecosystem": "Ubuntu:25.10"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-07-14T22:04:01.053Z", "early_advisories": [], "license": "You may freely use the PatchFirst selection and our additions (priorities, early warnings, texts, summaries and aggregates) for your own purposes, including internal business use. Resale, commercial distribution and bulk mirroring of this selection or these additions require a written agreement with the operator. Whenever you use or publish the selection or our additions, credit PatchFirst (https://patchfirst.dev/vulns/) with this link to the regional feed page. Original records from open sources remain subject to their respective licenses and terms. These conditions do not restrict your rights to the original data, which you can obtain directly from those sources.", "terms_url": "https://patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "Records are selected, normalized and combined by PatchFirst; summaries and translations may be added. News is credited with a link to the original source in each entry.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Upstream licenses vary; see the source catalog."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Free public scores; attribution requested (FIRST EPSS, scores generated by Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}