CVE-2026-40499

Katalog CVE

CVSS 7.8 · High EPSS 1,7%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada radare2. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

radare2 prior to version 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by embedding a newline byte in the PE section header name field. Attackers can craft a malicious PDB file with specially crafted section names to inject r2 commands that are executed when the idp command processes the file.

Rincian

Terbit di NVD

15 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/radareorg/radare2/commit/5590c87deeb7eb2a106fd7aab9ca88bfeebb7397 patch
• https://github.com/radareorg/radare2/issues/25752 exploit · issue tracking · advisory pihak ketiga
• https://www.vulncheck.com/advisories/radare2-command-injection-via-pdb-parser-print-gvars advisory pihak ketiga
• https://github.com/radareorg/radare2/releases/tag/6.1.4 release notes