CVE-2026-8695

Name of the Vulnerable Software and Affected Versions radare2 version 6.1.5

Description A use-after-free issue exists in the gdbr threads list() function. This occurs when a valid qfThreadInfo response is followed by a malformed qsThreadInfo response, allowing remote attackers to trigger memory corruption via GDB remote debugging. This can lead to a denial of service or potential code execution by manipulating thread list processing.

Recommendations Update to the version provided in the libsdb2 4 2-6.1.4-2.1 package for openSUSE Tumbleweed.