PT-2026-55807
CVE-2026-14758
·
Published
2026-07-05
·
Updated
2026-09-25
Description by
CVSS 3.1
5.5
MediumMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
radareorg radare2 versions prior to 6.1.7
Description
An integer overflow occurs in the hexpairs Parser component within the
cmd anal opcode() function located in the libr/core/cmd anal.inc.c file. This issue requires local access to be exploited.Recommendations
Apply patch 84e773986e7e5bb30453a9384f498ec0ccc9d0a9 to versions prior to 6.1.7.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾