CVEFinder.io

CVE-2026-14758

ℹī¸ low
🔍 Scan for this CVE
Summary

A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The name of the patch is 84e773986e7e5bb30453a9384f498ec0ccc9d0a9. A patch should be applied to remediate this issue.

CVSS Score
3.3
Low
EPSS Score
0.1
Exploit Probability
Published Date
2026-07-05
First Seen: 2026-07-06
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 2.8% of all 360,673 vulnerabilities in our database.

#350,737
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Jul 6, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Partial
Limited system impact
🏆 Discovered By
Kery Qi (VulDB User) (reporter)
SSVC data provided by CISA
Last Modified 2026-07-09
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-189 CWE-190

đŸ“Ļ Affected Products 2

Vendor Product Status Affected Versions
radare radare2 Affected
< 6.1.8
radare radare2 Affected
> 6.1.0 < 6.1.8

🔗 References 7

https://github.com/radareorg/radare2/
Product
https://github.com/radareorg/radare2/commit/84e77398...
Patch
https://github.com/radareorg/radare2/issues/26042
Exploit Issue Tracking
https://vuldb.com/cve/CVE-2026-14758
Third Party Advisory VDB Entry
https://vuldb.com/submit/850382
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376347
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376347/cti
Permissions Required VDB Entry

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-14786 ℹī¸ low 3.3 0.1 A security flaw has been discovered in radareorg radare2 up to 6.1.6. This impacts the function r_str_word_get0set of th... 2026-07-06
CVE-2026-14787 ℹī¸ low 3.3 0.1 A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/... 2026-07-06
CVE-2026-14788 ℹī¸ low 3.3 0.1 A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the funct... 2026-07-06
CVE-2026-14789 ℹī¸ low 3.3 0.2 A vulnerability was detected in radareorg radare2 up to 6.1.6. Affected by this issue is some unknown functionality of t... 2026-07-06
CVE-2026-14757 đŸ”ļ medium 5.3 0.1 A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file l... 2026-07-05
CVE-2026-14759 ℹī¸ low 3.3 0.2 A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_c... 2026-07-05
These CVEs affect the same products