Radare2 vulnerabilities
We track 2 vulnerabilities in Radare2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2026.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Radare2 vulnerabilities
- 9.8 Critical severity
radare2: Use After Free
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses.
- 9.8 Critical severity
radare2: Use After Free
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit th