https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T20:53:24.084202+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-333479 EUVD-2026-333479 2026-10-03T20:53:24.160206+00:00 EUVD-2026-333479 https://cve.radiocsirt.org/vuln/fkie_cve-2026-14761 fkie_cve-2026-14761 2026-10-03T20:53:24.160257+00:00

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.

 https://cve.radiocsirt.org/vuln/ghsa-q4m4-82h9-qfgv GHSA-q4m4-82h9-qfgv 2026-10-03T20:53:24.160293+00:00

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:21988-1 openSUSE-SU-2026:21988-1 — Security update for radare2 2026-10-03T20:53:24.160311+00:00

Security update for radare2

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-14761 UBUNTU-CVE-2026-14761 2026-10-03T20:53:24.160336+00:00

Affected: Ubuntu:16.04:LTS: radare2, Ubuntu:Pro:18.04:LTS: radare2, Ubuntu:Pro:20.04:LTS: radare2, Ubuntu:Pro:24.04:LTS: radare2, Ubuntu:25.10: radare2, Ubuntu:26.04:LTS: radare2

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.