CVE-2026-14788
Description
A flaw was found in radare2. A local attacker could trigger a use-after-free vulnerability within the r_core_bin_load function. This issue can lead to memory corruption, resulting in a denial of service (DoS) for the application.
Statement
This Low impact flaw in radare2, a reverse engineering framework, allows a local attacker to cause a denial of service. The use-after-free vulnerability in the r_core_bin_load function requires local access and specific interaction with the tool, limiting its broader system impact on typical Red Hat deployments.
Mitigation
To mitigate this issue, ensure that only trusted users have local access to systems where the `radare2` package is installed. If `radare2` is not required, consider removing the package to eliminate the potential for exploitation.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
