OPENSUSE-SU-2026:21988-1
Vulnerability from csaf_opensuse - Published: 2026-09-25 08:25 - Updated: 2026-10-01 16:39Summary
Security update for radare2
Severity
Critical
Notes
Title of the patch: Security update for radare2
Description of the patch: This update for radare2 fixes the following issues:
Changes in radare2:
- Update to version 6.2.2:
* Analysis: new JNI plugin with typed interface tables, arm64
Swift float calling conventions, DWARF prototype linking,
jump-table and switch-case fixes
* Core: fix RAnalOp leaks in disasm/diff/debug loops, aoj memory
use, partial-read handling, fp variable recovery
* Bundle sdb 2.5.2 (upstream pin): rename shlib to libsdb2_5_2
* Details can be found here:
https://github.com/radareorg/radare2/releases/tag/6.2.2
- Security issues fixed:
* CVE-2026-81886: Validate dmp64 page counts against dump size
(boo#1282346).
* CVE-2026-81885: Fix infinite loop in the NE fixup parser
(boo#1282345).
* CVE-2026-81884: Validate Mach-O LC_DATA_IN_CODE ranges
(boo#1282344).
* CVE-2026-81883: Fix Lua function parser OOB reads (boo#1282343).
* CVE-2026-81882: Fix bplist Unicode string conversion (boo#1282342).
* CVE-2026-81881: Fix Swift Mach-O field metadata bounds check
(boo#1282341).
* CVE-2026-81880: Decode PEF relocs lazily, add more bounds and
overflow checks (boo#1282340).
* CVE-2026-81879: Fix oobread in ELF PN_XNUM phdr count handling
(boo#1282339).
* CVE-2026-81878: Fix heap write overflow in Python loader
(boo#1282338).
* CVE-2026-14788: Denial of Service via use-after-free in
r_core_bin_load function (boo#1270453).
* CVE-2026-14761: Denial of service via integer overflow in string
manipulation functions (boo#1270452).
* CVE-2026-14760: Denial of Service via local use-after-free
vulnerability (boo#1270450).
* CVE-2026-14759: Denial of Service via heap-based buffer overflow
(boo#1270449).
* CVE-2026-14758: Denial of Service via integer overflow in hexpairs
parser (boo#1270447).
* CVE-2026-14757: Integer overflow allows local impact (boo#1270445).
* CVE-2026-40527: Command injection vulnerability in the afsv/afsvj
(boo#1262336).
* CVE-2026-4174: Missing validation against an upper limit when
allocating memory in the Mach-O file parser can lead to excessive
resource consumption (boo#1259722).
- Security issue fixed with the previous release:
* CVE-2026-41015: Configured on UNIX without SSL, allows command
injection via a PDB name to rabin2 (boo#1262190).
* CVE-2026-40517: Crafted PDB file with newline characters in symbol
names can allow to inject arbitrary commands (boo#1262680).
* CVE-2026-8695: UAFs in the gdb remote protocol ##crash (boo#1265403).
Patchnames: openSUSE-Leap-16.0-packagehub-630
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.3 (Medium)
Affected products
Recommended
13 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
important
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
moderate
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
low
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
moderate
9.8 (Critical)
Affected products
Recommended
13 products, the same list as for
CVE-2026-14757
Threats
Impact
critical
References
82 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "critical"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for radare2",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for radare2 fixes the following issues:\n\nChanges in radare2:\n\n- Update to version 6.2.2:\n * Analysis: new JNI plugin with typed interface tables, arm64\n Swift float calling conventions, DWARF prototype linking,\n jump-table and switch-case fixes\n * Core: fix RAnalOp leaks in disasm/diff/debug loops, aoj memory\n use, partial-read handling, fp variable recovery\n * Bundle sdb 2.5.2 (upstream pin): rename shlib to libsdb2_5_2\n * Details can be found here:\n https://github.com/radareorg/radare2/releases/tag/6.2.2\n\n- Security issues fixed:\n * CVE-2026-81886: Validate dmp64 page counts against dump size\n (boo#1282346).\n * CVE-2026-81885: Fix infinite loop in the NE fixup parser\n (boo#1282345).\n * CVE-2026-81884: Validate Mach-O LC_DATA_IN_CODE ranges\n (boo#1282344).\n * CVE-2026-81883: Fix Lua function parser OOB reads (boo#1282343).\n * CVE-2026-81882: Fix bplist Unicode string conversion (boo#1282342).\n * CVE-2026-81881: Fix Swift Mach-O field metadata bounds check\n (boo#1282341).\n * CVE-2026-81880: Decode PEF relocs lazily, add more bounds and\n overflow checks (boo#1282340).\n * CVE-2026-81879: Fix oobread in ELF PN_XNUM phdr count handling\n (boo#1282339).\n * CVE-2026-81878: Fix heap write overflow in Python loader\n (boo#1282338).\n * CVE-2026-14788: Denial of Service via use-after-free in\n r_core_bin_load function (boo#1270453).\n * CVE-2026-14761: Denial of service via integer overflow in string\n manipulation functions (boo#1270452).\n * CVE-2026-14760: Denial of Service via local use-after-free\n vulnerability (boo#1270450).\n * CVE-2026-14759: Denial of Service via heap-based buffer overflow\n (boo#1270449).\n * CVE-2026-14758: Denial of Service via integer overflow in hexpairs\n parser (boo#1270447).\n * CVE-2026-14757: Integer overflow allows local impact (boo#1270445).\n * CVE-2026-40527: Command injection vulnerability in the afsv/afsvj\n (boo#1262336).\n * CVE-2026-4174: Missing validation against an upper limit when\n allocating memory in the Mach-O file parser can lead to excessive\n resource consumption (boo#1259722).\n- Security issue fixed with the previous release:\n * CVE-2026-41015: Configured on UNIX without SSL, allows command\n injection via a PDB name to rabin2 (boo#1262190).\n * CVE-2026-40517: Crafted PDB file with newline characters in symbol\n names can allow to inject arbitrary commands (boo#1262680).\n * CVE-2026-8695: UAFs in the gdb remote protocol ##crash (boo#1265403).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-packagehub-630",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21988-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1259722",
"url": "https://bugzilla.suse.com/1259722"
},
{
"category": "self",
"summary": "SUSE Bug 1262190",
"url": "https://bugzilla.suse.com/1262190"
},
{
"category": "self",
"summary": "SUSE Bug 1262336",
"url": "https://bugzilla.suse.com/1262336"
},
{
"category": "self",
"summary": "SUSE Bug 1262680",
"url": "https://bugzilla.suse.com/1262680"
},
{
"category": "self",
"summary": "SUSE Bug 1265403",
"url": "https://bugzilla.suse.com/1265403"
},
{
"category": "self",
"summary": "SUSE Bug 1270445",
"url": "https://bugzilla.suse.com/1270445"
},
{
"category": "self",
"summary": "SUSE Bug 1270447",
"url": "https://bugzilla.suse.com/1270447"
},
{
"category": "self",
"summary": "SUSE Bug 1270449",
"url": "https://bugzilla.suse.com/1270449"
},
{
"category": "self",
"summary": "SUSE Bug 1270450",
"url": "https://bugzilla.suse.com/1270450"
},
{
"category": "self",
"summary": "SUSE Bug 1270452",
"url": "https://bugzilla.suse.com/1270452"
},
{
"category": "self",
"summary": "SUSE Bug 1270453",
"url": "https://bugzilla.suse.com/1270453"
},
{
"category": "self",
"summary": "SUSE Bug 1282338",
"url": "https://bugzilla.suse.com/1282338"
},
{
"category": "self",
"summary": "SUSE Bug 1282339",
"url": "https://bugzilla.suse.com/1282339"
},
{
"category": "self",
"summary": "SUSE Bug 1282340",
"url": "https://bugzilla.suse.com/1282340"
},
{
"category": "self",
"summary": "SUSE Bug 1282341",
"url": "https://bugzilla.suse.com/1282341"
},
{
"category": "self",
"summary": "SUSE Bug 1282342",
"url": "https://bugzilla.suse.com/1282342"
},
{
"category": "self",
"summary": "SUSE Bug 1282343",
"url": "https://bugzilla.suse.com/1282343"
},
{
"category": "self",
"summary": "SUSE Bug 1282344",
"url": "https://bugzilla.suse.com/1282344"
},
{
"category": "self",
"summary": "SUSE Bug 1282345",
"url": "https://bugzilla.suse.com/1282345"
},
{
"category": "self",
"summary": "SUSE Bug 1282346",
"url": "https://bugzilla.suse.com/1282346"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14757 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14757/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14758 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14758/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14759 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14759/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14760 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14760/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14761 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14761/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-14788 page",
"url": "https://www.suse.com/security/cve/CVE-2026-14788/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-40517 page",
"url": "https://www.suse.com/security/cve/CVE-2026-40517/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-40527 page",
"url": "https://www.suse.com/security/cve/CVE-2026-40527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41015 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41015/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-4174 page",
"url": "https://www.suse.com/security/cve/CVE-2026-4174/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81878 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81878/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81879 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81879/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81880 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81880/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81881 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81881/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81882 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81882/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81883 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81883/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81884 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81884/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81885 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81885/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-81886 page",
"url": "https://www.suse.com/security/cve/CVE-2026-81886/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-8695 page",
"url": "https://www.suse.com/security/cve/CVE-2026-8695/"
}
],
"title": "Security update for radare2",
"tracking": {
"current_release_date": "2026-10-01T16:39:43Z",
"generator": {
"date": "2026-09-25T08:25:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21988-1",
"initial_release_date": "2026-09-25T08:25:52Z",
"revision_history": [
{
"date": "2026-09-25T08:25:52Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-10-01T16:39:43Z",
"number": "2",
"summary": "unknown changes"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"product": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"product_id": "libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsdb2_5_2@6.2.2-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "radare2-0:6.2.2-bp160.1.1.aarch64",
"product": {
"name": "radare2-0:6.2.2-bp160.1.1.aarch64",
"product_id": "radare2-0:6.2.2-bp160.1.1.aarch64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:radare:radare2:6.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/radare2@6.2.2-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"product": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"product_id": "radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/radare2-devel@6.2.2-bp160.1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch",
"product": {
"name": "radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch",
"product_id": "radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/suse/radare2-zsh-completion@6.2.2-bp160.1.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"product": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"product_id": "libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsdb2_5_2@6.2.2-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "radare2-0:6.2.2-bp160.1.1.ppc64le",
"product": {
"name": "radare2-0:6.2.2-bp160.1.1.ppc64le",
"product_id": "radare2-0:6.2.2-bp160.1.1.ppc64le",
"product_identification_helper": {
"cpe": "cpe:2.3:a:radare:radare2:6.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/radare2@6.2.2-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"product": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"product_id": "radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/radare2-devel@6.2.2-bp160.1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"product": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"product_id": "libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsdb2_5_2@6.2.2-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "radare2-0:6.2.2-bp160.1.1.s390x",
"product": {
"name": "radare2-0:6.2.2-bp160.1.1.s390x",
"product_id": "radare2-0:6.2.2-bp160.1.1.s390x",
"product_identification_helper": {
"cpe": "cpe:2.3:a:radare:radare2:6.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/radare2@6.2.2-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "radare2-devel-0:6.2.2-bp160.1.1.s390x",
"product": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.s390x",
"product_id": "radare2-devel-0:6.2.2-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/radare2-devel@6.2.2-bp160.1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"product": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"product_id": "libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/libsdb2_5_2@6.2.2-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "radare2-0:6.2.2-bp160.1.1.x86_64",
"product": {
"name": "radare2-0:6.2.2-bp160.1.1.x86_64",
"product_id": "radare2-0:6.2.2-bp160.1.1.x86_64",
"product_identification_helper": {
"cpe": "cpe:2.3:a:radare:radare2:6.2.2:*:*:*:*:*:*:*",
"purl": "pkg:rpm/suse/radare2@6.2.2-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"product": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"product_id": "radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/radare2-devel@6.2.2-bp160.1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64"
},
"product_reference": "libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le"
},
"product_reference": "libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x"
},
"product_reference": "libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64"
},
"product_reference": "libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-0:6.2.2-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64"
},
"product_reference": "radare2-0:6.2.2-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-0:6.2.2-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le"
},
"product_reference": "radare2-0:6.2.2-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-0:6.2.2-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x"
},
"product_reference": "radare2-0:6.2.2-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-0:6.2.2-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64"
},
"product_reference": "radare2-0:6.2.2-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64"
},
"product_reference": "radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le"
},
"product_reference": "radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x"
},
"product_reference": "radare2-devel-0:6.2.2-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-devel-0:6.2.2-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64"
},
"product_reference": "radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
},
"product_reference": "radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-14757",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14757"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was determined in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer overflow. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. It is suggested to install a patch to address this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14757",
"url": "https://www.suse.com/security/cve/CVE-2026-14757"
},
{
"category": "external",
"summary": "SUSE Bug 1270445 for CVE-2026-14757",
"url": "https://bugzilla.suse.com/1270445"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-14757"
},
{
"cve": "CVE-2026-14758",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14758"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability was identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. The attack needs to be performed locally. The exploit is publicly available and might be used. The name of the patch is 84e773986e7e5bb30453a9384f498ec0ccc9d0a9. A patch should be applied to remediate this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14758",
"url": "https://www.suse.com/security/cve/CVE-2026-14758"
},
{
"category": "external",
"summary": "SUSE Bug 1270447 for CVE-2026-14758",
"url": "https://bugzilla.suse.com/1270447"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-14758"
},
{
"cve": "CVE-2026-14759",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14759"
}
],
"notes": [
{
"category": "general",
"text": "A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. The patch is named cd62d15a6cbecdc67fd03f3ebdbbbeb741d18f87. To fix this issue, it is recommended to deploy a patch.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14759",
"url": "https://www.suse.com/security/cve/CVE-2026-14759"
},
{
"category": "external",
"summary": "SUSE Bug 1270449 for CVE-2026-14759",
"url": "https://bugzilla.suse.com/1270449"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-14759"
},
{
"cve": "CVE-2026-14760",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14760"
}
],
"notes": [
{
"category": "general",
"text": "A weakness has been identified in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. The attack requires local access. The exploit has been made available to the public and could be used for attacks. This patch is called 8b25c773785d85cb0103410a0905089d286921c2. It is advisable to implement a patch to correct this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14760",
"url": "https://www.suse.com/security/cve/CVE-2026-14760"
},
{
"category": "external",
"summary": "SUSE Bug 1270450 for CVE-2026-14760",
"url": "https://bugzilla.suse.com/1270450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-14760"
},
{
"cve": "CVE-2026-14761",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14761"
}
],
"notes": [
{
"category": "general",
"text": "A security vulnerability has been detected in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is a20a56917ae85d732e683f8d9078bdcfee92446c. Applying a patch is the recommended action to fix this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14761",
"url": "https://www.suse.com/security/cve/CVE-2026-14761"
},
{
"category": "external",
"summary": "SUSE Bug 1270452 for CVE-2026-14761",
"url": "https://bugzilla.suse.com/1270452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-14761"
},
{
"cve": "CVE-2026-14788",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-14788"
}
],
"notes": [
{
"category": "general",
"text": "A security vulnerability has been detected in radareorg radare2 up to 6.1.6. Affected by this vulnerability is the function r_core_bin_load of the file libr/core/cfile.c. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The name of the patch is 635ab1eeb30340c26076722a90cb91fb2272130b. Applying a patch is advised to resolve this issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-14788",
"url": "https://www.suse.com/security/cve/CVE-2026-14788"
},
{
"category": "external",
"summary": "SUSE Bug 1270453 for CVE-2026-14788",
"url": "https://bugzilla.suse.com/1270453"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-14788"
},
{
"cve": "CVE-2026-40517",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-40517"
}
],
"notes": [
{
"category": "general",
"text": "radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser\u0027s print_gvars() function that allows attackers to execute arbitrary commands by crafting a malicious PDB file with newline characters in symbol names. Attackers can inject arbitrary radare2 commands through unsanitized symbol name interpolation in the flag rename command, which are then executed when a user runs the idp command against the malicious PDB file, enabling arbitrary OS command execution through radare2\u0027s shell execution operator.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-40517",
"url": "https://www.suse.com/security/cve/CVE-2026-40517"
},
{
"category": "external",
"summary": "SUSE Bug 1262680 for CVE-2026-40517",
"url": "https://bugzilla.suse.com/1262680"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "important"
}
],
"title": "CVE-2026-40517"
},
{
"cve": "CVE-2026-40527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-40527"
}
],
"notes": [
{
"category": "general",
"text": "radare2 prior to commit bc5a890 contains a command injection vulnerability in the afsv/afsvj command path where crafted ELF binaries can embed malicious r2 command sequences as DWARF DW_TAG_formal_parameter names. Attackers can craft a binary with shell commands in DWARF parameter names that execute when radare2 analyzes the binary with aaa and subsequently runs afsvj, allowing arbitrary shell command execution through the unsanitized parameter interpolation in the pfq command string.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-40527",
"url": "https://www.suse.com/security/cve/CVE-2026-40527"
},
{
"category": "external",
"summary": "SUSE Bug 1262336 for CVE-2026-40527",
"url": "https://bugzilla.suse.com/1262336"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "important"
}
],
"title": "CVE-2026-40527"
},
{
"cve": "CVE-2026-41015",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41015"
}
],
"notes": [
{
"category": "general",
"text": "radare2 before 9236f44, when configured on UNIX without SSL, allows command injection via a PDB name to rabin2 -PP. NOTE: although users are supposed to use the latest version from git (not a release), the date range for the vulnerable code was less than a week, occurring after 6.1.2 but before 6.1.3.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41015",
"url": "https://www.suse.com/security/cve/CVE-2026-41015"
},
{
"category": "external",
"summary": "SUSE Bug 1262190 for CVE-2026-41015",
"url": "https://bugzilla.suse.com/1262190"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "important"
}
],
"title": "CVE-2026-41015"
},
{
"cve": "CVE-2026-4174",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-4174"
}
],
"notes": [
{
"category": "general",
"text": "A vulnerability has been found in Radare2 5.9.9. This issue affects the function walk_exports_trie of the file libr/bin/format/mach0/mach0.c of the component Mach-O File Parser. Such manipulation leads to resource consumption. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used. The existence of this vulnerability is still disputed at present. Upgrading to version 6.1.2 is capable of addressing this issue. The name of the patch is 4371ae84c99c46b48cb21badbbef06b30757aba0. You should upgrade the affected component. The code maintainer states that, \"[he] wont consider this bug a DoS\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-4174",
"url": "https://www.suse.com/security/cve/CVE-2026-4174"
},
{
"category": "external",
"summary": "SUSE Bug 1259722 for CVE-2026-4174",
"url": "https://bugzilla.suse.com/1259722"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-4174"
},
{
"cve": "CVE-2026-81878",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81878"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s CPython bytecode .pyc marshal parser was vulnerable because the CPython marshal readers accepted a 32-bit string length without rejecting values that overflow the size-plus-one allocation. The vulnerability is triggered by opening or inspecting a crafted .pyc file through r2 or rabin2. A length of 0xffffffff wrapped the allocation to zero before the common byte reader wrote attacker-controlled data and fill bytes beyond the heap allocation. This can cause heap memory corruption and denial of service; arbitrary code execution is possible but has not been demonstrated. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81878",
"url": "https://www.suse.com/security/cve/CVE-2026-81878"
},
{
"category": "external",
"summary": "SUSE Bug 1282338 for CVE-2026-81878",
"url": "https://bugzilla.suse.com/1282338"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-81878"
},
{
"cve": "CVE-2026-81879",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81879"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s ELF PN_XNUM handling was vulnerable because the ELF parser allocated the program-header array using the resolved PN_XNUM count but several consumers still iterated with the original e_phnum value of 65535. The vulnerability is triggered by processing a crafted ELF file with e_phnum = 0xffff and a much smaller resolved count in shdr[0].sh_info. Consumers iterated beyond the allocated program-header array. This can cause a heap out-of-bounds read and process termination, resulting in denial of service; memory disclosure and code execution have not been demonstrated. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81879",
"url": "https://www.suse.com/security/cve/CVE-2026-81879"
},
{
"category": "external",
"summary": "SUSE Bug 1282339 for CVE-2026-81879",
"url": "https://bugzilla.suse.com/1282339"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-81879"
},
{
"cve": "CVE-2026-81880",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81880"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s Apple Preferred Executable Format loader was vulnerable because the PEF loader accepted relocSecCount values that were not bounded by the number of sections or complete relocation records in the input. The vulnerability is triggered by normal binary-format auto-detection of a small crafted Apple PEF file. The loader could perform up to 268,435,456 relocation-section iterations and repeated buffer operations after record offsets passed the end of the file. This can cause denial of service through excessive CPU consumption and prolonged processing. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81880",
"url": "https://www.suse.com/security/cve/CVE-2026-81880"
},
{
"category": "external",
"summary": "SUSE Bug 1282340 for CVE-2026-81880",
"url": "https://bugzilla.suse.com/1282340"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-81880"
},
{
"cve": "CVE-2026-81881",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81881"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s Mach-O Swift field-metadata parser was vulnerable because a relative Swift field pointer could be lower than the field-metadata section base, making subtraction produce a negative logical index. The vulnerability is triggered by parsing Swift type and class metadata from a crafted Mach-O file. The derived index was used to read four bytes immediately before the allocated field-metadata buffer. This can cause incorrect metadata processing or process termination; no attacker-observable memory disclosure has been demonstrated. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81881",
"url": "https://www.suse.com/security/cve/CVE-2026-81881"
},
{
"category": "external",
"summary": "SUSE Bug 1282341 for CVE-2026-81881",
"url": "https://bugzilla.suse.com/1282341"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-81881"
},
{
"cve": "CVE-2026-81882",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81882"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s binary property-list Unicode parser was vulnerable because the binary-property-list Unicode parser underallocated an uninitialized UTF-8 destination and did not guarantee NUL termination. The vulnerability is triggered by running the explicit pFB or pFBj commands on untrusted binary property-list data. The json encoder treated the converted data as a nul-terminated c string and could continue reading beyond the allocation. This can cause disclosure of uninitialized or adjacent heap contents in JSON output and possible process termination. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81882",
"url": "https://www.suse.com/security/cve/CVE-2026-81882"
},
{
"category": "external",
"summary": "SUSE Bug 1282342 for CVE-2026-81882",
"url": "https://bugzilla.suse.com/1282342"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-81882"
},
{
"cve": "CVE-2026-81883",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81883"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s Lua 5.3 bytecode function parser was vulnerable because the Lua 5.3 bytecode function parser read fixed function-metadata fields immediately after a function-name string without checking the remaining buffer length. The vulnerability is triggered by opening or inspecting a crafted Lua 5.3 bytecode file whose function-name string ends at the input-buffer boundary. The parser read two integers and three one-byte fields beyond the allocated input buffer. This can cause invalid parser results or process termination; no attacker-observable memory disclosure has been demonstrated. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81883",
"url": "https://www.suse.com/security/cve/CVE-2026-81883"
},
{
"category": "external",
"summary": "SUSE Bug 1282343 for CVE-2026-81883",
"url": "https://bugzilla.suse.com/1282343"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-81883"
},
{
"cve": "CVE-2026-81884",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81884"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s Mach-O LC_DATA_IN_CODE parser was vulnerable because the Mach-O LC_DATA_IN_CODE parser trusted dataoff and datasize and allowed a final partial record to be processed. The vulnerability is triggered by opening a crafted Mach-O file while the non-default bin.verbose option is enabled. When datasize was not a multiple of data_in_code_entry, the last iteration read beyond the allocated buffer. This can cause a heap out-of-bounds read and possible process termination; no attacker-observable memory disclosure has been demonstrated. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81884",
"url": "https://www.suse.com/security/cve/CVE-2026-81884"
},
{
"category": "external",
"summary": "SUSE Bug 1282344 for CVE-2026-81884",
"url": "https://bugzilla.suse.com/1282344"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "low"
}
],
"title": "CVE-2026-81884"
},
{
"cve": "CVE-2026-81885",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81885"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s NE relocation fixup-chain parser was vulnerable because the NE relocation parser followed fixup chains without an active iteration limit or cycle detection. The vulnerability is triggered by opening a crafted NE executable whose in-bounds relocation entry points back to itself instead of reaching 0xffff. The parser repeatedly processed the same relocation and allocated another relocation object on each iteration. This can cause denial of service through continuous CPU and memory consumption. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81885",
"url": "https://www.suse.com/security/cve/CVE-2026-81885"
},
{
"category": "external",
"summary": "SUSE Bug 1282345 for CVE-2026-81885",
"url": "https://bugzilla.suse.com/1282345"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-81885"
},
{
"cve": "CVE-2026-81886",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-81886"
}
],
"notes": [
{
"category": "general",
"text": "radare2 is a UNIX-like reverse engineering framework and command-line toolset. Prior to 6.2.0, radare2\u0027s Windows 64-bit crash-dump dmp64 parser was vulnerable because the Windows dmp64 parser used an input-controlled physical-memory-run PageCount directly as the bound of a per-page allocation loop. The vulnerability is triggered by opening a small crafted full-memory Windows crash dump. The parser repeatedly allocated and appended page descriptors without validating the count against the dump size. This can cause denial of service through excessive memory consumption and processing time. This issue is fixed in version 6.2.0.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-81886",
"url": "https://www.suse.com/security/cve/CVE-2026-81886"
},
{
"category": "external",
"summary": "SUSE Bug 1282346 for CVE-2026-81886",
"url": "https://bugzilla.suse.com/1282346"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-81886"
},
{
"cve": "CVE-2026-8695",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-8695"
}
],
"notes": [
{
"category": "general",
"text": "radare2 6.1.5 contains a use-after-free vulnerability in the gdbr_threads_list() function that allows remote attackers to trigger memory corruption by sending a valid qfThreadInfo response followed by a malformed qsThreadInfo response. Attackers can exploit this vulnerability through GDB remote debugging to cause a denial of service or potentially achieve code execution by manipulating thread list processing.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-8695",
"url": "https://www.suse.com/security/cve/CVE-2026-8695"
},
{
"category": "external",
"summary": "SUSE Bug 1265403 for CVE-2026-8695",
"url": "https://bugzilla.suse.com/1265403"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:libsdb2_5_2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.aarch64",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.s390x",
"openSUSE Leap 16.0:radare2-devel-0:6.2.2-bp160.1.1.x86_64",
"openSUSE Leap 16.0:radare2-zsh-completion-0:6.2.2-bp160.1.1.noarch"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-09-25T08:25:52Z",
"details": "critical"
}
],
"title": "CVE-2026-8695"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…