Vulnerability Description
A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The name of the patch is 84e773986e7e5bb30453a9384f498ec0ccc9d0a9. A patch should be applied to remediate this issue.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Radare | Radare2 | >= 6.1.0, < 6.1.8 |
Related Weaknesses (CWE)
References
- https://github.com/radareorg/radare2/Product
- https://github.com/radareorg/radare2/commit/84e773986e7e5bb30453a9384f498ec0ccc9Patch
- https://github.com/radareorg/radare2/issues/26042ExploitIssue Tracking
- https://vuldb.com/cve/CVE-2026-14758Third Party AdvisoryVDB Entry
- https://vuldb.com/submit/850382Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/376347Third Party AdvisoryVDB Entry
- https://vuldb.com/vuln/376347/ctiPermissions RequiredVDB Entry
FAQ
What is CVE-2026-14758?
CVE-2026-14758 is a vulnerability with a CVSS score of 3.3 (LOW). A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such man...
How severe is CVE-2026-14758?
CVE-2026-14758 has been rated LOW with a CVSS base score of 3.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-14758?
Check the references section above for vendor advisories and patch information. Affected products include: Radare Radare2.