CVE-2026-14787

Katalog CVE

CVSS 7.8 · High EPSS 0,21%

Kerentanan Numeric Errors pada radare2. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: 2b6265476c75567006b0fcbb749f4ae7b189c5df. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD

6 Juli 2026

Terakhir diubah

9 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-189: Numeric Errors
CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/phix33/radare2/commit/2b6265476c75567006b0fcbb749f4ae7b189c5df patch
• https://vuldb.com/cve/CVE-2026-14787 advisory pihak ketiga · vdb entry
• https://vuldb.com/submit/850387 advisory pihak ketiga · vdb entry
• https://vuldb.com/vuln/376376 advisory pihak ketiga · vdb entry
• https://github.com/radareorg/radare2/issues/26048 exploit · issue tracking
• https://github.com/radareorg/radare2/ product
• https://vuldb.com/vuln/376376/cti permissions required · vdb entry