CVE-2026-8696
HighSummary
Version 6.1.5 of radare2 contains a use-after-free vulnerability in the gdbr_pids_list() function, which can be exploited by remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses.
Risk Assessment
This vulnerability poses a risk to organizations by allowing attackers to remotely trigger denial of service or execute unauthorized code, potentially leading to serious security implications.
Recommendation
It is recommended to update radare2 to the latest version to mitigate this vulnerability and to monitor systems for potential exploitation attempts.
Original NVD description (English source)
radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_pids_list() function within the GDB client core that allows remote attackers to cause a denial of service or potentially execute arbitrary code by sending malformed thread information responses. Attackers can trigger the vulnerability by causing qsThreadInfo to fail after qfThreadInfo successfully allocates RDebugPid structures, resulting in double-free memory corruption when the error path attempts to clean up the list.