CVE-2026-14787
radareorg radare2 pb Print cmd_print.inc cmd_print integer overflow
CVSS Score
3.3
EPSS Score
0.1%
EPSS Percentile
2th
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: 2b6265476c75567006b0fcbb749f4ae7b189c5df. It is recommended to apply a patch to fix this issue.
| CWE | CWE-190 CWE-189 |
| Vendor | radareorg |
| Product | radare2 |
| Published | Jul 6, 2026 |
| Last Updated | Jul 6, 2026 |
Stay Ahead of the Next One
Get instant alerts for radareorg radare2
Be the first to know when new low vulnerabilities affecting radareorg radare2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
radareorg / radare2
6.1.0 6.1.1 6.1.2 6.1.3 6.1.4 6.1.5 6.1.6
References
vuldb.com: https://vuldb.com/vuln/376376 vuldb.com: https://vuldb.com/vuln/376376/cti vuldb.com: https://vuldb.com/cve/CVE-2026-14787 vuldb.com: https://vuldb.com/submit/850387 github.com: https://github.com/radareorg/radare2/issues/26048 github.com: https://github.com/phix33/radare2/commit/2b6265476c75567006b0fcbb749f4ae7b189c5df github.com: https://github.com/radareorg/radare2/
Credits
🔍 Kery Qi (VulDB User)