radare kayıtları
radare üreticisine ait 181 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %28,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read47
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer25
- CWE-416 Use After Free19
- CWE-476 NULL Pointer Dereference18
- CWE-787 Out-of-bounds Write14
- CWE-122 Heap-based Buffer Overflow11
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
181 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2020-24133İstismar yok | A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute arradare · radare2-extras · CWE-787 | Kritik9,8 | — | %2,6 | 14 Tem 2021 |
40Planlayın | CVE-2025-1744İstismar yok | Out-of-bounds Write in radare2radare · radare2 · CWE-787 | Kritik10,0 | — | %0,5 | 28 Şub 2025 |
40Planlayın | CVE-2025-1864İstismar yok | Buffer Overflow and Potential Code Execution in Radare2radare · radare2 · CWE-119 | Kritik10,0 | — | %0,5 | 3 Mar 2025 |
39İzleyin | CVE-2022-0559İstismar yok | Use After Free in radareorg/radare2radare · radare2 · CWE-416 | Kritik9,8 | — | %1,3 | 16 Şub 2022 |
39İzleyin | CVE-2022-0139İstismar yok | Use After Free in radareorg/radare2radare · radare2 · CWE-416 | Kritik9,8 | — | %1,2 | 8 Şub 2022 |
39İzleyin | CVE-2023-4322İstismar yok | Heap-based Buffer Overflow in radareorg/radare2radare · radare2 · CWE-122 | Kritik9,8 | — | %0,9 | 14 Ağu 2023 |
39İzleyin | CVE-2024-29646İstismar yok | Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.radare · radare2 · CWE-120 | Kritik9,8 | — | %0,9 | 17 Ara 2024 |
39İzleyin | CVE-2023-46569İstismar yok | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.radare · radare2 · CWE-125 | Kritik9,8 | — | %0,9 | 27 Eki 2023 |
39İzleyin | CVE-2023-46570İstismar yok | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.radare · radare2 · CWE-125 | Kritik9,8 | — | %0,9 | 27 Eki 2023 |
38İzleyin | CVE-2026-6942İstismar yok | radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypassradare · radare2 mcp server · CWE-78 | Kritik9,3 | — | %3,0 | 23 Nis 2026 |
38İzleyin | CVE-2020-15121İstismar yok | Command injection in Radare2radare · radare2 · CWE-78 | Kritik9,6 | — | %1,6 | 20 Tem 2020 |
36İzleyin | CVE-2022-1899İstismar yok | Out-of-bounds Read in radareorg/radare2radare · radare2 · CWE-125 | Kritik9,1 | — | %1,5 | 26 May 2022 |
36İzleyin | CVE-2020-27794İstismar yok | A double free issue was discovered in radare2 in cmd_info.c:cmd_info().radare · radare2 · CWE-415 | Kritik9,1 | — | %1,1 | 19 Ağu 2022 |
36İzleyin | CVE-2022-1297İstismar yok | Out-of-bounds Read in r_bin_ne_get_entrypoints function in radareorg/radare2radare · radare2 · CWE-125 | Kritik9,1 | — | %0,9 | 11 Nis 2022 |
36İzleyin | CVE-2022-1296İstismar yok | Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare2radare · radare2 · CWE-125 | Kritik9,1 | — | %0,8 | 11 Nis 2022 |
36İzleyin | CVE-2021-32495İstismar yok | Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function.radare · radare2 · CWE-416 | Kritik9,1 | — | %0,8 | 7 Tem 2023 |
35İzleyin | CVE-2023-5686İstismar yok | Heap-based Buffer Overflow in radareorg/radare2radare · radare2 · CWE-122 | Yüksek8,8 | — | %0,8 | 20 Eki 2023 |
34İzleyin | CVE-2026-40517İstismar yok | radare2 < 6.1.4 Command Injection via PDB Parser Symbol Namesradare · radare2 · CWE-78 | Yüksek8,4 | — | %1,7 | 22 Nis 2026 |
34İzleyin | CVE-2026-40499İstismar yok | radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()radare · radare2 · CWE-78 | Yüksek8,4 | — | %1,7 | 15 Nis 2026 |
34İzleyin | CVE-2026-40527İstismar yok | radare2 Command Injection via DWARF Parameter Namesradare · radare2 · CWE-78 | Yüksek8,5 | — | %1,5 | 17 Nis 2026 |
34İzleyin | CVE-2026-8695İstismar yok | radare2 6.1.5 Use-After-Free via gdbr_threads_list()radare · radare2 · CWE-416 | Yüksek8,7 | — | %1,1 | 15 May 2026 |
34İzleyin | CVE-2026-8696İstismar yok | radare2 6.1.5 Use-After-Free via gdbr_pids_list()radare · radare2 · CWE-416 | Yüksek8,7 | — | %1,0 | 15 May 2026 |
32İzleyin | CVE-2019-14745Kavram kanıtı | In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c.radare · radare2 · CWE-77 | Yüksek7,8 | — | %4,5 | 7 Ağu 2019 |
32İzleyin | CVE-2019-19590İstismar yok | In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c.radare · radare2 · CWE-190 | Yüksek7,8 | — | %2,5 | 4 Ara 2019 |
32İzleyin | CVE-2019-16718İstismar yok | In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c.radare · radare2 · CWE-78 | Yüksek7,8 | — | %2,3 | 23 Eyl 2019 |
- CVE-2020-2413340Planlayın
A heap buffer overflow vulnerability in the r_asm_swf_disass function of Radare2-extras before commit e74a93c allows attackers to execute ar
KritikCVSS 9,8İstismar yokEPSS %3radare · radare2-extras14 Tem 2021
- CVE-2025-174440Planlayın
Out-of-bounds Write in radare2
KritikCVSS 10,0İstismar yokEPSS %1radare · radare228 Şub 2025
- CVE-2025-186440Planlayın
Buffer Overflow and Potential Code Execution in Radare2
KritikCVSS 10,0İstismar yokEPSS %0radare · radare23 Mar 2025
- CVE-2022-055939İzleyin
Use After Free in radareorg/radare2
KritikCVSS 9,8İstismar yokEPSS %1radare · radare216 Şub 2022
- CVE-2022-013939İzleyin
Use After Free in radareorg/radare2
KritikCVSS 9,8İstismar yokEPSS %1radare · radare28 Şub 2022
- CVE-2023-432239İzleyin
Heap-based Buffer Overflow in radareorg/radare2
KritikCVSS 9,8İstismar yokEPSS %1radare · radare214 Ağu 2023
- CVE-2024-2964639İzleyin
Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.
KritikCVSS 9,8İstismar yokEPSS %1radare · radare217 Ara 2024
- CVE-2023-4656939İzleyin
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h.
KritikCVSS 9,8İstismar yokEPSS %1radare · radare227 Eki 2023
- CVE-2023-4657039İzleyin
An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h.
KritikCVSS 9,8İstismar yokEPSS %1radare · radare227 Eki 2023
- CVE-2026-694238İzleyin
radare2-mcp <=1.6.0 OS Command Injection via Shell Metacharacter Bypass
KritikCVSS 9,3İstismar yokEPSS %3radare · radare2 mcp server23 Nis 2026
- CVE-2020-1512138İzleyin
Command injection in Radare2
KritikCVSS 9,6İstismar yokEPSS %2radare · radare220 Tem 2020
- CVE-2022-189936İzleyin
Out-of-bounds Read in radareorg/radare2
KritikCVSS 9,1İstismar yokEPSS %1radare · radare226 May 2022
- CVE-2020-2779436İzleyin
A double free issue was discovered in radare2 in cmd_info.c:cmd_info().
KritikCVSS 9,1İstismar yokEPSS %1radare · radare219 Ağu 2022
- CVE-2022-129736İzleyin
Out-of-bounds Read in r_bin_ne_get_entrypoints function in radareorg/radare2
KritikCVSS 9,1İstismar yokEPSS %1radare · radare211 Nis 2022
- CVE-2022-129636İzleyin
Out-of-bounds read in `r_bin_ne_get_relocs` function in radareorg/radare2
KritikCVSS 9,1İstismar yokEPSS %1radare · radare211 Nis 2022
- CVE-2021-3249536İzleyin
Radare2 has a use-after-free vulnerability in pyc parser's get_none_object function.
KritikCVSS 9,1İstismar yokEPSS %1radare · radare27 Tem 2023
- CVE-2023-568635İzleyin
Heap-based Buffer Overflow in radareorg/radare2
YüksekCVSS 8,8İstismar yokEPSS %1radare · radare220 Eki 2023
- CVE-2026-4051734İzleyin
radare2 < 6.1.4 Command Injection via PDB Parser Symbol Names
YüksekCVSS 8,4İstismar yokEPSS %2radare · radare222 Nis 2026
- CVE-2026-4049934İzleyin
radare2 < 6.1.4 Command Injection via PDB Parser print_gvars()
YüksekCVSS 8,4İstismar yokEPSS %2radare · radare215 Nis 2026
- CVE-2026-4052734İzleyin
radare2 Command Injection via DWARF Parameter Names
YüksekCVSS 8,5İstismar yokEPSS %1radare · radare217 Nis 2026
- CVE-2026-869534İzleyin
radare2 6.1.5 Use-After-Free via gdbr_threads_list()
YüksekCVSS 8,7İstismar yokEPSS %1radare · radare215 May 2026
- CVE-2026-869634İzleyin
radare2 6.1.5 Use-After-Free via gdbr_pids_list()
YüksekCVSS 8,7İstismar yokEPSS %1radare · radare215 May 2026
- CVE-2019-1474532İzleyin
In radare2 before 3.7.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c.
YüksekCVSS 7,8Kavram kanıtıEPSS %4radare · radare27 Ağu 2019
- CVE-2019-1959032İzleyin
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c.
YüksekCVSS 7,8İstismar yokEPSS %3radare · radare24 Ara 2019
- CVE-2019-1671832İzleyin
In radare2 before 3.9.0, a command injection vulnerability exists in bin_symbols() in libr/core/cbin.c.
YüksekCVSS 7,8İstismar yokEPSS %2radare · radare223 Eyl 2019