Radare

Radare is a reverse-engineering framework and toolset widely used by security researchers, developers, and analysts for binary analysis and debugging, and despite maintaining a focused product line, its position in the security research ecosystem places it among the more prominent entities tracked for vulnerability disclosure. Vulnerabilities affecting the vendor skew strongly toward critical-severity outcomes across its core Radare2 product and associated extensions, reflecting the memory-safety challenges inherent to a native-code analysis tool that processes untrusted binaries. The exposure recurs through weakness classes including out-of-bounds reads and writes, use-after-free conditions, buffer-boundary violations, and NULL-pointer dereferences—characteristic of a parser-heavy codebase that must safely handle arbitrary input files. Because Radare2 operates as both a research tool and a supply-chain component in security workflows, vulnerabilities here may affect downstream tooling and analyses that depend on it. Current exploitation activity and exposure counts are shown alongside this summary.