CVEFinder.io

CVE-2026-14787

â„šī¸ low
🔍 Scan for this CVE
Summary

A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: 2b6265476c75567006b0fcbb749f4ae7b189c5df. It is recommended to apply a patch to fix this issue.

CVSS Score
3.3
Low
EPSS Score
0.1
Exploit Probability
Published Date
2026-07-06
First Seen: 2026-07-07
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 2.8% of all 364,849 vulnerabilities in our database.

#354,808
Below average severity
Severity Percentile
đŸŽ¯ CISA SSVC Assessment Updated: Jul 6, 2026
🔍 Exploitation Status
Poc
Proof-of-concept available
âš™ī¸ Automatable
NO
Requires human interaction
đŸ’Ĩ Technical Impact
Partial
Limited system impact
🏆 Discovered By
Kery Qi (VulDB User) (reporter)
SSVC data provided by CISA
Last Modified 2026-07-09
CVSS Vector 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS Vector 4.0 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CWE IDs (Weakness Types)

đŸ“Ļ Affected Products 1

🔗 References 7

https://vuldb.com/cve/CVE-2026-14787
Third Party Advisory VDB Entry
https://vuldb.com/submit/850387
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376376
Third Party Advisory VDB Entry
https://vuldb.com/vuln/376376/cti
Permissions Required VDB Entry

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-81878 đŸ”ļ medium 5.5 0.2 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecod... 2026-09-22
CVE-2026-81879 đŸ”ļ medium 5.5 0.2 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PN_XNUM han... 2026-09-22
CVE-2026-81880 đŸ”ļ medium 5.5 0.1 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred... 2026-09-22
CVE-2026-81881 â„šī¸ low 3.3 0.1 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift fi... 2026-09-22
CVE-2026-81882 â„šī¸ low 3.3 0.1 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's binary property... 2026-09-22
CVE-2026-81883 â„šī¸ low 3.3 0.2 radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Lua 5.3 bytecod... 2026-09-22
These CVEs affect the same products