CVE-2026-14757
Medium
Description
A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue.
SeverityMedium
CVSS5.3
Exploit probability—
ProductRadare2
PublishedJul 5, 2026
First seenJul 5, 2026
Weakness typeCWE-190Integer overflowCWE-189CWE-189
How to fix
Update
- radare radare26.1.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| radare radare2 | 6.1.0 ≤ v < 6.1.8 | 6.1.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.