Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-14786: radare2 local overflow can cause crash or takeover

CVE-2026-14786 · published 4 months ago

Summary

Versions of radare2 up to 6.1.6 contain a coding mistake in a routine that handles strings, which can cause a number to overflow when crafted data is processed. An attacker who can run code on the same machine could make the program crash or potentially take control of it. Install the latest update that includes the provided fix to eliminate the risk.

What to do

Update radare radare2 to version 6.1.8 or later.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	radareorg	radare2	6.1.0
–	radare	radare2	< 6.1.8 `cpe:2.3:a:radare:radare2::::::::`
Ubuntu:16.04:LTS	canonical	radare2	All versions

Original advisory text

radareorg radare2 str.c r_str_word_get0set integer overflow

A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of the file libr/util/str.c. The manipulation results in integer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as 11ac224c0eb8d57830fccc99e1c1cd8e5d958813. It is best practice to apply a patch to resolve this issue.

References

https://github.com/radareorg/radare2/commit/11ac224c0eb8d57830fccc99e1c1cd8e5d95... Patch
https://vuldb.com/cve/CVE-2026-14786 Vendor Advisory
https://vuldb.com/submit/850386 Vendor Advisory
https://vuldb.com/vuln/376375 Vendor Advisory
https://github.com/radareorg/radare2/issues/26047 Third Party Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/14xxx/CVE-2026-14786... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-14786 Vendor Advisory
https://ubuntu.com/security/CVE-2026-14786 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-14786 Third Party Advisory
https://github.com/radareorg/radare2/ URL
https://vuldb.com/vuln/376375/cti Third Party Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.3 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-189Numeric Errors

CWE-190Integer Overflow

Timeline

Published6 Jul 2026

Updated30 Oct 2026

First seen6 Jul 2026

Sources

CVE-2026-14786 · NVD

CVE-2026-14786 · MITRE

CVE-2026-14786 · OSV

UBUNTU-CVE-2026-14786 · OSV

Track software like this

Free during beta