PT-2026-55806 · Radareorg · Radare2

Kery Qi · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14757

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core anal bytes of the file libr/core/cmd anal.inc. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

CWE-189

Related Identifiers

CVE-2026-14757

Affected Products

Radare2

References · 7

• 🔥 https://github.com/radareorg/radare2/issues/26041 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14757 · Security Note
• https://vuldb.com/submit/850381 · Note
• https://vuldb.com/vuln/376346/cti · Note
• https://vuldb.com/vuln/376346 · Note
• https://github.com/radareorg/radare2 · Note
• https://vuldb.com/cve/CVE-2026-14757 · Note