CVE security advisories and vulnerability history for radare2 by radare.
161
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
28
Public exploits
With known exploit
6.7
Avg CVSS
2017–2026
Last updated
Overview
radare radare2 has 161 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 28 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting radare radare2, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of radare radare2's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical8
High37
Medium28
Low9
79 additional CVEs have no CVSS severity score.
In CISA’s Known Exploited Vulnerabilities catalog
0
None of radare radare2's CVEs are currently listed in CISA's KEV catalog.
Public exploits
28
28 of radare radare2's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every radare radare2 version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about radare radare2 vulnerabilities.
How many CVEs does radare radare2 have?
radare radare2 has 161 published CVE records since 2017.
How many radare radare2 CVEs are in CISA KEV?
None of radare radare2's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for radare radare2 vulnerabilities?
Yes — 28 of radare radare2's CVEs have a known public exploit.
Which versions of radare radare2 are affected?
218 distinct radare radare2 versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in radare radare2 CVEs?
radare radare2's CVEs most often map to these CWE weakness types: CWE-416 (Use After Free), CWE-122 (Heap-based Buffer Overflow), CWE-476 (NULL Pointer Dereference), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer).
How many critical radare radare2 vulnerabilities are there?
radare radare2 has 8 critical and 37 high-severity CVEs.
What is the average severity of radare radare2 CVEs?
The average CVSS base score across radare radare2's scored CVEs is 6.7.
