CVE-2026-40527

Katalog CVE

CVSS 7.8 · High EPSS 1,5%

Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada radare2. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute when radare2 analyzes the binary with aaa and subsequently runs afsvj, allowing arbitrary shell command execution through the unsanitized parameter interpolation in the pfq command string.

Rincian

Terbit di NVD

17 April 2026

Terakhir diubah

14 Juli 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/radareorg/radare2/commit/bc5a89033db3ecb5b1f7bf681fc6ba4dcfc14683 patch
• https://github.com/radareorg/radare2/pull/25821 exploit · issue tracking · patch
• https://www.vulncheck.com/advisories/radare2-command-injection-via-dwarf-parameter-names advisory pihak ketiga