EUVD-2026-84467

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in t...

CVE-2026-81879

radare2 (a UNIX-like reverse engineering framework) is vulnerable to a heap out-of-bounds read in its ELF parser's PN_XNUM handling prior to version 6.2.0. The root cause is a mismatch: the program-header array is allocated using the resolved PN_XNUM count, but several consumers still iterate usi...

CVE-2026-81879 radare2: Heap out-of-bounds read in radare2 ELF PN_XNUM handling

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PNXNUM count but several consumers still iterated with the original ephnum value...

EUVD-2026-84504

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's ELF PNXNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PNXNUM count but several consumers still iterated with the original ephnum value...

CVE-2026-81878 radare2: Integer overflow causes heap out-of-bounds write in radare2 PYC parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

EUVD-2026-84503

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The...

CVE-2026-81878

radare2 , a UNIX-like reverse engineering framework, is affected by an integer overflow in its CPython bytecode .pyc marshal parser prior to version 6.2.0 . The root cause is that the marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocati...

EUVD-2026-84502

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical inde...

CVE-2026-81881 radare2: Heap out-of-bounds read in radare2 Mach-O Swift metadata parser

radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2's Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical inde...

CVE-2026-81881

radare2 (a UNIX-like reverse engineering framework) is affected by a heap out-of-bounds read in its Mach-O Swift field-metadata parser prior to version 6.2.0 . A relative Swift field pointer that is lower than the field-metadata section base causes a negative logical index, which reads four bytes...

yarasafe

YARASAFE - Automatic Binary Function Similarity Checks with Yara SAFE is a tool developed to create Binary Functions Embedding developed by Massarelli L., Di Luna G.A., Petroni F., Querzoni L. and Baldoni R. You can use SAFE to create your function embedding to use inside yara rules. If you are...

metame

metame metame 是一个用于任意可执行文件的简单变形代码引擎。 来自维基百科： 变形代码是指在运行时，能在某种解释下输出自身代码的逻辑等价版本的代码。 这被计算机病毒用来规避杀毒软件的模式识别。 metame 的实现方式如下： 1. 打开给定的二进制文件并分析代码 2. 随机用逻辑等价且大小相同的指令替换指令 3. 复制并修补原始二进制文件以生成变异版本 目前支持以下架构： x86 32 bits x86 64 bits 此外，它支持多种文件格式，因为使用了 radare2 进行文件解析和代码分析。 变异前后的代码示例： 提示：此片段中已替换了两条指令。 这里还有一个关于如何将...

metame

metame metame is a simple metamorphic code engine for arbitrary executables. From Wikipedia: Metamorphic code is code that when run outputs a logically equivalent version of its own code under some interpretation. This is used by computer viruses to avoid the pattern recognition of anti-virus...

SAFE

SAFE : Self Attentive Function Embedding Paper This software is the outcome of our accademic research. See our arXiv paper: arxiv If you use this code, please cite our accademic paper as: root@kitploit: @inproceedingsmassarelli2018safe, title=SAFE: Self-Attentive Function Embeddings for Binary...

CVE-2024-26475

CVE-2024-26475 Authors Sherlock Fang, Vlad Tronciu, Ayam Babu Description An issue in radareorg radare2 v.0.9.7 through v.5.8.6 and fixed in v.5.8.8 allows a local attacker to cause a denial of service via the grubsfsreadextent function. Attack Vectors Crafting a payload to cause “treeblock =...

CVE-2019-14745

CVE-2019-14745 武器化的 radare2 漏洞（CVE-2019-14745 分配）由 @CaptnBanana 和 blenk92 发现 有关漏洞的详细信息，请阅读 https://bananamafia.dev/post/r2-pwndebian/ 用法 首先，你需要 LIEF 的 Python 绑定（https://lief.quarkslab.com/） 然后，按如下方式运行脚本： python nukeradare2.py 这将创建一个以 nuked 为前缀的二进制文件。通过以下方式运行它： radare2 -c "ood" 或者在 radare2 中输入 "oo...

radare2-scripts

radare2 脚本 概述 一组用于 radare2 的脚本集合。 r2bincarver.py - 用于从内存转储中雕刻文件的脚本。 r2hashfuncdecoder.py - 用于解码哈希函数的脚本，常见于 shellcode 中。 脚本 二进制文件雕刻器 该脚本可根据给定的偏移量和大小，从内存转储（MDMP）中雕刻文件。 除了雕刻功能外，它还支持对雕刻出的 PE 文件进行基本修补。 在编写本文时，它将修补 PE 节头中的偏移量。 依赖要求 root@kitploit: pip install r2pipe 使用默认参数的示例输出： 示例 root@kitploit: $...

r2d2

r2d2 Plugin de GPT-4 para radare2 Introducción Este es un plugin de radare2 que utiliza GPT-4 para que GPT-4 emita comandos r2 e interprete la salida. https://github.com/dnakov/r2d2/assets/3777433/4bc7b211-bccc-4b04-9350-6bfca8989edb...

Security update for radare2 (important)

openSUSE Security Update: Security update for radare2 Announcement ID: openSUSE-SU-2026:0231-1 Rating: important References: 1244121 1262142 1265403 Cross-References: CVE-2025-1378 CVE-2025-1744 CVE-2025-1864 CVE-2025-5641 CVE-2026-40499 CVE-2026-8695 CVSS scores: CVE-2025-1378 SUSE: 4.8...

SUSE CVE-2026-14788

A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function rcorebinload of the file libr/core/cfile.c. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and...