CVEFinder.io

CVE-2026-14758

ℹī¸ low
🔍 Scan for this CVE
Summary

A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The name of the patch is 84e773986e7e5bb30453a9384f498ec0ccc9d0a9. A patch should be applied to remediate this issue.

CVSS Score
3.3
Low
EPSS Score
0.1
Exploit Probability
Published Date
2026-07-05
First Seen: 2026-07-06
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 2.8% of all 364,849 vulnerabilities in our database.

#354,808
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Jul 6, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
⚙ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Partial
Limited system impact
🏆 Discovered By
Kery Qi (VulDB User) (reporter)
SSVC data provided by CISA
Last Modified 2026-07-09
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)
CWE-189 CWE-190

đŸ“Ļ Affected Products 2

Vendor Product Status Affected Versions
radare radare2 Affected
< 6.1.8
radare radare2 Affected
> 6.1.0 < 6.1.8

🔗 References 7

https://github.com/radareorg/radare2/
Product
https://github.com/radareorg/radare2/commit/84e77398...
Patch
https://github.com/radareorg/radare2/issues/26042
Exploit Issue Tracking
https://vuldb.com/cve/CVE-2026-14758
Third Party Advisory VDB Entry
https://vuldb.com/submit/850382
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376347
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376347/cti
Permissions Required VDB Entry

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-81878 đŸ”ļ medium 5.5 0.2 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecod... 2026-09-22
CVE-2026-81879 đŸ”ļ medium 5.5 0.2 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM han... 2026-09-22
CVE-2026-81880 đŸ”ļ medium 5.5 0.1 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred... 2026-09-22
CVE-2026-81881 ℹī¸ low 3.3 0.1 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift fi... 2026-09-22
CVE-2026-81882 ℹī¸ low 3.3 0.1 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property... 2026-09-22
CVE-2026-81883 ℹī¸ low 3.3 0.2 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecod... 2026-09-22
These CVEs affect the same products