CVE-2026-14787
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A vulnerability has been found in radareorg radare2 up to version 6.1.6, involving an integer overflow in the cmd_print function within the pb Print Command Handler component. The attack requires local access and a public exploit is available.
Risk Assessment
The organization faces local attacks that could cause unexpected behavior in radare2, potentially leading to privilege escalation or system instability.
Recommendation
Apply the patch with ID 2b6265476c75567006b0fcbb749f4ae7b189c5df immediately to fix the vulnerability in radare2.
Original NVD description (English source)
A weakness has been identified in radareorg radare2 up to 6.1.6. Affected is the function cmd_print in the library libr/core/cmd_print.inc of the component pb Print Command Handler. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: 2b6265476c75567006b0fcbb749f4ae7b189c5df. It is recommended to apply a patch to fix this issue.