Vulnerability Database · OSS-Fuzz · radare2 · Version
radare2 5.9.6
5.9.6 is affected by 19 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 8 Medium 8 Low 0 Unrated 3
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
radare2 5.9.6 vulnerabilities
19 vulnerabilities cover radare2 5.9.6. Scroll the table for all of them, or open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| Heap Double-Free Vulnerability in Radare2: Critical Memory Management Flaw | N/A high | 28c7c2d593a024e8b30eaa56abc6b52158a09842 | 20 Jan 2025 |
| Heap-Use-After-Free Vulnerability in Radare2 | N/A high | 44a501ba45d51776c9ea4820007477b580df50a3 | 19 Jan 2025 |
| Critical Stack Buffer Overflow in Radare2: CVE-2024-523 | N/A high | No fix published | 01 Jun 2024 |
| Heap-buffer-overflow in load_buffer in radare2 | N/A medium | No fix published | 23 Feb 2023 |
| Heap-buffer-overflow in parse_classes_64 in radare2 | N/A medium | No fix published | 29 Jan 2023 |
| Heap-buffer-overflow in io_memory_read in radare2 | N/A high | No fix published | 05 Nov 2022 |
| Stack-use-after-return vulnerability in radare2 | N/A unrated | No fix published | 29 Sep 2022 |
| Segv on unknown address in r_buf_free in radare2 | N/A unrated | 500686304a355ef007875d841c848275487f7626 | 31 Dec 2021 |
| Heap-buffer-overflow in dex_parse_debug_item in radare2 | N/A medium | 37fd41dc09b298cd22b35500f5465ce1a3dd461f | 22 Jul 2020 |
| Heap-buffer-overflow in dex_parse_debug_item in radare2 | N/A medium | 45a2f03199e2cef792f3a1f621bb2df408bf7a03 | 22 Jul 2020 |
| Stack-buffer-overflow in string_scan_range in radare2 | N/A high | 4886aa9f90eae0360f9e3d4714167a8a25983249 | 22 Jul 2020 |
| Heap-buffer-overflow in load - radare2 | N/A medium | 9392fc7117dd5240c76d8ab81d84b482bc968339 | 01 Jul 2020 |
| Stack-use-after-return in sdb_itoa in radare2 | N/A unrated | 56f5eaf18ed51fbf279a1911224be9863e8e4285 | 01 Jul 2020 |
| Heap-double-free vulnerability in radare2 | N/A high | 149cb3587e4cd3928f8f56553ecfeaac15452585 | 01 Jul 2020 |
| UNKNOWN READ Vulnerability in radare2 | N/A medium | 118bf6a693ef0a349959919fd6217e70a26ddf62 | 01 Jul 2020 |
| Heap-buffer-overflow in Elf32_r_bin_elf_compiler in radare2 | N/A high | 9f840c6306b853e98eab75ed2fa9522f7e2dae98 | 01 Jul 2020 |
| Heap-buffer-overflow in symbols - radare2 | N/A medium | 9392fc7117dd5240c76d8ab81d84b482bc968339 | 01 Jul 2020 |
| Heap-buffer-overflow in r_read_le32 in radare2 | N/A medium | 55ec5cc1938fba3c506e87c5314630f1f0736a15 | 01 Jul 2020 |
| Heap-buffer-overflow in r_core_lines_initcache in radare2 | N/A high | 7d30ff52fc1be6f9698b166107b8981eab6ec7ba | 01 Jul 2020 |
Looking for another version, or everything Vulert holds for radare2?
Questions
About radare2 5.9.6
Is radare2 5.9.6 vulnerable?
Yes. 19 vulnerabilities in the Vulert database cover radare2 5.9.6: 0 critical, 8 high, 8 medium and 0 low, plus 3 not yet rated. Each entry above names the fixed version to move to.
How do I monitor radare2 for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the radare2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.