What’s Vulnerable › Vulnerabilities

CVE-2024-29646

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-12-17 · updated 2026-06-17
• Weakness: CWE-120

Description

Buffer Overflow vulnerability in radarorg radare2 v.5.8.8 allows an attacker to execute arbitrary code via the name, type, or group fields.

Affected products

• radareorg/radare2: 5.8.8

References

• https://gist.github.com/Crispy-fried-chicken/0be4a204e7226fa2cea761c09f027690
• https://github.com/radareorg/radare2/pull/22562
• https://github.com/radareorg/radare2/pull/22567
• https://github.com/radareorg/radare2/pull/22572
• https://github.com/radareorg/radare2/pull/22578
• https://github.com/radareorg/radare2/pull/22599

Get alerted when CVE-2024-29646 or the next vulnerability affects your stack