Vulnerability Database · OSS-Fuzz · radare2 · Version
radare2 5.4.0-git
5.4.0-git is affected by 21 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 8 Medium 11 Low 0 Unrated 2
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
radare2 5.4.0-git vulnerabilities
21 vulnerabilities cover radare2 5.4.0-git. Scroll the table for all of them, or open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Heap Double-Free Vulnerability in Radare2: Critical Memory Management Flaw | N/A high | 28c7c2d593a024e8b30eaa56abc6b52158a09842 | 20 Jan 2025 |
| Heap-Use-After-Free Vulnerability in Radare2 | N/A high | 44a501ba45d51776c9ea4820007477b580df50a3 | 19 Jan 2025 |
| Critical Stack Buffer Overflow in Radare2: CVE-2024-523 | N/A high | No fix published | 01 Jun 2024 |
| Heap-buffer-overflow in load_buffer in radare2 | N/A medium | No fix published | 23 Feb 2023 |
| Heap-buffer-overflow in io_memory_read in radare2 | N/A high | No fix published | 05 Nov 2022 |
| Heap-buffer-overflow in r_str_utf8_codepoint in radare2 | N/A medium | 2cfc1d7e12adf87a28ac78abb32233cf39c6d54a | 19 Jun 2022 |
| Segv on unknown address in r_buf_free in radare2 | N/A unrated | 500686304a355ef007875d841c848275487f7626 | 31 Dec 2021 |
| Heap-buffer-overflow in parse_microsoft_mangled_name in radare2 | N/A medium | a31394b39e6194a8ecd6c83e53c658f704a315fb | 28 Oct 2021 |
| Heap-buffer-overflow in parse_relocation_info in radare2 | N/A medium | ca8d8b39f3e34a4fd943270330b80f1148129de4 | 28 Jul 2020 |
| Heap-buffer-overflow in dex_parse_debug_item in radare2 | N/A medium | 37fd41dc09b298cd22b35500f5465ce1a3dd461f | 22 Jul 2020 |
| Heap-buffer-overflow in dex_parse_debug_item in radare2 | N/A medium | 45a2f03199e2cef792f3a1f621bb2df408bf7a03 | 22 Jul 2020 |
| Stack-buffer-overflow in string_scan_range in radare2 | N/A high | 4886aa9f90eae0360f9e3d4714167a8a25983249 | 22 Jul 2020 |
| Heap-buffer-overflow in read_uleb128 in radare2 | N/A medium | 3b04d3ef4093dafeff72e22589a3598ca0202ac9 | 14 Jul 2020 |
| Heap-buffer-overflow in load - radare2 | N/A medium | 9392fc7117dd5240c76d8ab81d84b482bc968339 | 01 Jul 2020 |
| Stack-use-after-return in sdb_itoa in radare2 | N/A unrated | 56f5eaf18ed51fbf279a1911224be9863e8e4285 | 01 Jul 2020 |
| Heap-double-free vulnerability in radare2 | N/A high | 149cb3587e4cd3928f8f56553ecfeaac15452585 | 01 Jul 2020 |
| UNKNOWN READ Vulnerability in radare2 | N/A medium | 118bf6a693ef0a349959919fd6217e70a26ddf62 | 01 Jul 2020 |
| Heap-buffer-overflow in Elf32_r_bin_elf_compiler in radare2 | N/A high | 9f840c6306b853e98eab75ed2fa9522f7e2dae98 | 01 Jul 2020 |
| Heap-buffer-overflow in symbols - radare2 | N/A medium | 9392fc7117dd5240c76d8ab81d84b482bc968339 | 01 Jul 2020 |
| Heap-buffer-overflow in r_read_le32 in radare2 | N/A medium | 55ec5cc1938fba3c506e87c5314630f1f0736a15 | 01 Jul 2020 |
| Heap-buffer-overflow in r_core_lines_initcache in radare2 | N/A high | 7d30ff52fc1be6f9698b166107b8981eab6ec7ba | 01 Jul 2020 |
Looking for another version, or everything Vulert holds for radare2?
Questions
About radare2 5.4.0-git
Is radare2 5.4.0-git vulnerable?
Yes. 21 vulnerabilities in the Vulert database cover radare2 5.4.0-git: 0 critical, 8 high, 11 medium and 0 low, plus 2 not yet rated. Each entry above names the fixed version to move to.
How do I monitor radare2 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the radare2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.