CVE-2026-14760

Name of the Vulnerable Software and Affected Versions radareorg radare2 versions prior to 6.1.7

Description A use after free issue exists in the regprofile Handler component within the r core seek arch bits() function of the libr/core/disasm.c file. A use after free occurs when a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. This flaw requires local access to be exploited.

Recommendations Apply patch 8b25c773785d85cb0103410a0905089d286921c2 to resolve the issue. As a temporary mitigation, restrict local access to the system to minimize the risk of exploitation.