CVE-2019-14745

CVE-2019-14745 is a high-severity command injection vulnerability affecting radare2 versions prior to 3.7.0, as well as Fedora Project's radare2 distributions. It allows an attacker to execute arbitrary shell commands with the victim's privileges by crafting a malicious executable file, stemming from improper handling of embedded symbol names. The vulnerability has a CVSS score of 7.8, indicating high impact on confidentiality, integrity, and availability, with a local attack vector and low attack complexity requiring user interaction. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.