CVE-2026-40517

Katalog CVE

CVSS 7.8 · High EPSS 1,7%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada radare2. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2's shell execution operator.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

1,7% peluang dieksploitasi; lebih tinggi dari 76,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://blog.calif.io/p/mad-bugs-discovering-a-0-day-in-zero exploit · advisory pihak ketiga
• https://github.com/radareorg/radare2/issues/25730 exploit · issue tracking · advisory pihak ketiga
• https://www.vulncheck.com/advisories/radare2-command-injection-via-pdb-parser-symbol-names advisory pihak ketiga
• https://github.com/radareorg/radare2/pull/25731 issue tracking