CVE-2026-14757: Integer Overflow in radareorg radare2
An integer overflow vulnerability exists in radareorg radare2 up to version 6.1.6 in the function core_anal_bytes within libr/core/cmd_anal.inc. The issue requires local access to exploit and has been publicly disclosed. The vulnerability has a medium severity rating with a CVSS score of 4.8. Users are advised to apply a patch once available to mitigate this issue.
AI Analysis
Technical Summary
CVE-2026-14757 is an integer overflow vulnerability affecting radareorg radare2 versions 6.1.0 through 6.1.6. The flaw is located in the core_anal_bytes function of the libr/core/cmd_anal.inc file. Exploitation requires local access and can lead to unexpected behavior due to integer overflow. The vulnerability has been publicly disclosed, but no official patch or remediation level has been confirmed in the provided data.
Potential Impact
The integer overflow may cause unexpected behavior or potential instability in radare2 when processing certain inputs locally. The CVSS score of 4.8 indicates a medium severity impact. There is no evidence of remote exploitation or high-severity consequences such as privilege escalation or denial of service from the provided information.
Mitigation Recommendations
No official patch or remediation has been confirmed yet. Users should monitor the vendor's advisory for an official fix and apply it once available. Until then, limit local access to trusted users to reduce exploitation risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
CVE-2026-14757: Integer Overflow in radareorg radare2
Description
An integer overflow vulnerability exists in radareorg radare2 up to version 6.1.6 in the function core_anal_bytes within libr/core/cmd_anal.inc. The issue requires local access to exploit and has been publicly disclosed. The vulnerability has a medium severity rating with a CVSS score of 4.8. Users are advised to apply a patch once available to mitigate this issue.
CVSS v4.0
Score 4.8medium
Affected software
pkg:github/radareorg/radare2cpe:2.3:a:radareorg:radare2:*:*:*:*:*:*:*:*Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-14757 is an integer overflow vulnerability affecting radareorg radare2 versions 6.1.0 through 6.1.6. The flaw is located in the core_anal_bytes function of the libr/core/cmd_anal.inc file. Exploitation requires local access and can lead to unexpected behavior due to integer overflow. The vulnerability has been publicly disclosed, but no official patch or remediation level has been confirmed in the provided data.
Potential Impact
The integer overflow may cause unexpected behavior or potential instability in radare2 when processing certain inputs locally. The CVSS score of 4.8 indicates a medium severity impact. There is no evidence of remote exploitation or high-severity consequences such as privilege escalation or denial of service from the provided information.
Mitigation Recommendations
No official patch or remediation has been confirmed yet. Users should monitor the vendor's advisory for an official fix and apply it once available. Until then, limit local access to trusted users to reduce exploitation risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-04T16:19:28.961Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4a769227e9c797191e1929
Added to database: 07/05/2026, 15:21:54 UTC
Last enriched: 07/05/2026, 15:36:26 UTC
Last updated: 07/05/2026, 17:43:51 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.