PT-2026-41375 · Radare2 · Radare2

Saad Elharaj · Published 2026-05-15 · Updated 2026-06-12 · CVE-2026-8696

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions radare2 version 6.1.5

Description A use-after-free issue exists in the gdbr pids list() function within the GDB client core. Remote attackers can cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses. The issue is triggered when qsThreadInfo fails after qfThreadInfo has successfully allocated RDebugPid structures, leading to double-free memory corruption during the error path cleanup process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-8696

Affected Products

Radare2

References · 13

• 🔥 https://github.com/radareorg/radare2/issues/25836 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/8xxx/CVE-2026-8696.json · Exploit
• https://github.com/radareorg/radare2/commit/c213ad6894a1eb9086ac8bf5fae35757e9e1683c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-8696 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-8696 · Security Note
• https://osv.dev/vulnerability/CVE-2026-8696 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-8696 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-8696 · Vendor Advisory
• https://twitter.com/UpwindMDR/status/2055679855820181743 · Twitter Post
• https://t.me/CVEtracker/53966 · Telegram Post
• https://twitter.com/CVEnew/status/2055457513508630788 · Twitter Post
• https://twitter.com/saaaadhjj/status/2065481702957326406 · Twitter Post
• https://vulncheck.com/advisories/radare2-use-after-free-via-gdbr-pids-list · Note