CVE-2026-14760: radareorg radare2 regprofile disasm.c r_core_seek_arch_bits use after free
A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function rcoreseekarchbits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8b25c773785d85cb0103410a0905089d286921c2. It is advisable to implement a patch to correct this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
radareorg radare2 regprofile Handler (libr/core/disasm.c: r_core_seek_arch_bits)to a version that resolves this vulnerability.Patch 8b25c773785d85cb0103410a0905089d286921c2 - Compensating control
Because the attack requires local access and a public exploit exists, restrict local access to affected radare2/regprofile functionality to trusted users and environments (e.g., via OS account controls and host access restrictions).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14760?
The severity of CVE-2026-14760 is low, rated at 3.3.
What is CVE-2026-14760 about?
CVE-2026-14760 describes a use after free vulnerability in the r_core_seek_arch_bits function of radareorg radare2.
How can CVE-2026-14760 be exploited?
CVE-2026-14760 can be exploited through local access to manipulate the vulnerable function.
How do I fix CVE-2026-14760?
To fix CVE-2026-14760, upgrade to a patched version of radareorg radare2 beyond 6.1.6.
What component is affected by CVE-2026-14760?
The regprofile Handler component is affected by CVE-2026-14760 in the file libr/core/disasm.c.